linux-kernel - [GIT PULL] smb3 client fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAH2r5ms=TTjN5yoGsnEhrvqioM3pG6ANcTwsC8L1q833EPmMtQ@mail.gmail.com>
Date: Sat, 6 Apr 2024 00:08:19 -0500
From: Steve French <smfrench@...il.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: CIFS <linux-cifs@...r.kernel.org>, LKML <linux-kernel@...r.kernel.org>
Subject: [GIT PULL] smb3 client fixes

Please pull the following changes since commit
39cd87c4eb2b893354f3b850f916353f2658ae6f:

  Linux 6.9-rc2 (2024-03-31 14:32:39 -0700)

are available in the Git repository at:

  git://git.samba.org/sfrench/cifs-2.6.git tags/6.9-rc2-smb3-client-fixes

for you to fetch changes up to e0e50401cc3921c9eaf1b0e667db174519ea939f:

  smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
(2024-04-03 14:45:15 -0500)

----------------------------------------------------------------
17 cifs.ko changesets, most also for stable
- fix to retry close to avoid potential handle leaks when server returns EBUSY
- Three DFS fixes including a fix for potential use after free
- fscache fix
- minor strncpy cleanup
- reconnect race fix
- series of patches to deal with various possible race conditions
(UAFs) tearing sessions down

The important fix to support password rotation is not included in this P/R (am
giving that patch more time for any additional review feedback) but should be
ready to send next week.

----------------------------------------------------------------
David Howells (1):
      cifs: Fix caching to try to do open O_WRONLY as rdwr on server

Justin Stitt (1):
      smb: client: replace deprecated strncpy with strscpy

Paulo Alcantara (14):
      smb: client: fix UAF in smb2_reconnect_server()
      smb: client: guarantee refcounted children from parent session
      smb: client: refresh referral without acquiring refpath_lock
      smb: client: handle DFS tcons in cifs_construct_tcon()
      smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
      smb: client: fix potential UAF in cifs_debug_files_proc_show()
      smb: client: fix potential UAF in cifs_dump_full_key()
      smb: client: fix potential UAF in cifs_stats_proc_write()
      smb: client: fix potential UAF in cifs_stats_proc_show()
      smb: client: fix potential UAF in smb2_is_valid_lease_break()
      smb: client: fix potential UAF in smb2_is_valid_oplock_break()
      smb: client: fix potential UAF in is_valid_oplock_break()
      smb: client: fix potential UAF in smb2_is_network_name_deleted()
      smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

Ritvik Budhiraja (1):
      smb3: retrying on failed server close

 fs/smb/client/cached_dir.c    |   6 +-
 fs/smb/client/cifs_debug.c    |   6 ++
 fs/smb/client/cifsfs.c        |  11 +++
 fs/smb/client/cifsglob.h      |  19 ++++--
 fs/smb/client/cifsproto.h     |  20 +++---
 fs/smb/client/cifssmb.c       |   6 +-
 fs/smb/client/connect.c       | 153 +++++++++++++++++++++++++++---------------
 fs/smb/client/dfs.c           |  51 +++++++-------
 fs/smb/client/dfs.h           |  33 +++++----
 fs/smb/client/dfs_cache.c     |  53 +++++++--------
 fs/smb/client/dir.c           |  15 +++++
 fs/smb/client/file.c          | 111 +++++++++++++++++++++++++-----
 fs/smb/client/fs_context.c    |   6 +-
 fs/smb/client/fs_context.h    |  12 ++++
 fs/smb/client/fscache.h       |   6 ++
 fs/smb/client/ioctl.c         |   6 +-
 fs/smb/client/misc.c          |   8 +--
 fs/smb/client/smb1ops.c       |   4 +-
 fs/smb/client/smb2misc.c      |   4 ++
 fs/smb/client/smb2ops.c       |  13 ++--
 fs/smb/client/smb2pdu.c       |   2 +-
 fs/smb/client/smb2transport.c |   2 +-
 22 files changed, 369 insertions(+), 178 deletions(-)


-- 
Thanks,

Steve