linux-kernel - [GIT PULL] ksmbd server fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAH2r5mtQPWefhxpwgYUyVkyaSWL0nRurOc3qAV9XxbUN5dni-w@mail.gmail.com>
Date:   Fri, 10 Nov 2023 01:16:47 -0600
From:   Steve French <smfrench@...il.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     Namjae Jeon <linkinjeon@...nel.org>,
        LKML <linux-kernel@...r.kernel.org>,
        CIFS <linux-cifs@...r.kernel.org>
Subject: [GIT PULL] ksmbd server fixes

Please pull the following changes since commit
766e9cf3bd64c45fcace3acc6f8b3df815448ea3:

  Merge tag '6.7-rc-smb3-client-fixes-part1' of
git://git.samba.org/sfrench/cifs-2.6 (2023-11-04 09:13:50 -1000)

are available in the Git repository at:

  git://git.samba.org/ksmbd.git tags/6.7-rc-smb3-server-part2

for you to fetch changes up to 5a5409d90bd05f87fe5623a749ccfbf3f7c7d400:

  ksmbd: handle malformed smb1 message (2023-11-07 18:54:25 -0600)

----------------------------------------------------------------
Three ksmbd server fixes (two also for stable):
- slab out of bounds fix in ACL handling
- fix malformed request oops
- minor doc fix
----------------------------------------------------------------
Namjae Jeon (3):
      ksmbd: fix slab out of bounds write in smb_inherit_dacl()
      ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
      ksmbd: handle malformed smb1 message

 fs/smb/server/smb_common.c | 11 +++++++++++
 fs/smb/server/smbacl.c     | 29 ++++++++++++++++++++++++++---
 fs/smb/server/vfs.c        |  7 ++++---
 3 files changed, 41 insertions(+), 6 deletions(-)


-- 
Thanks,

Steve