linux-kernel - Backport request: commit 29be9100aca2915fab54b5693309bc42956542e5 ("afs: Don't cross .backup mountpoint from backup volume")

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 4 Jun 2024 11:50:06 -0400
From: Jeffrey E Altman <jaltman@...istor.com>
To: linux-stable <stable@...r.kernel.org>
Cc: "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Backport request: commit 29be9100aca2915fab54b5693309bc42956542e5
 ("afs: Don't cross .backup mountpoint from backup volume")

Please backport to the following patch which was merged upstream.

It should apply to linux-5.4.y and later.

commit 29be9100aca2915fab54b5693309bc42956542e5
Author: Marc Dionne <marc.dionne@...istor.com>1
Date:   Fri May 24 17:17:55 2024 +0100

     afs: Don't cross .backup mountpoint from backup volume

     Don't cross a mountpoint that explicitly specifies a backup volume
     (target is <vol>.backup) when starting from a backup volume.

     It it not uncommon to mount a volume's backup directly in the volume
     itself.  This can cause tools that are not paying attention to get
     into a loop mounting the volume onto itself as they attempt to
     traverse the tree, leading to a variety of problems.

     This doesn't prevent the general case of loops in a sequence of
     mountpoints, but addresses a common special case in the same way
     as other afs clients.

     Reported-by: Jan Henrik Sylvester <jan.henrik.sylvester@...-hamburg.de>
     Link: 
http://lists.infradead.org/pipermail/linux-afs/2024-May/008454.html
     Reported-by: Markus Suvanto <markus.suvanto@...il.com>
     Link: 
http://lists.infradead.org/pipermail/linux-afs/2024-February/008074.html
     Signed-off-by: Marc Dionne <marc.dionne@...istor.com>
     Signed-off-by: David Howells <dhowells@...hat.com>
     Link: 
https://lore.kernel.org/r/768760.1716567475@warthog.procyon.org.uk
     Reviewed-by: Jeffrey Altman <jaltman@...istor.com>
     cc: linux-afs@...ts.infradead.org
     Signed-off-by: Christian Brauner <brauner@...nel.org>

Thank you.

Jeffrey Altman

Download attachment "smime.p7s" of type "application/pkcs7-signature" (4039 bytes)