linux-kernel - Re: [PATCH v6.1 0/2] ksmbd: fix potencial out-of-bounds when buffer offset is invalid

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAKYAXd8pWn+fY=kAX_inrAS3TxmSB+qrjDSr7gZq9dn2P5Nfcg@mail.gmail.com>
Date: Mon, 18 Nov 2024 11:17:53 +0900
From: Namjae Jeon <linkinjeon@...nel.org>
To: Vamsi Krishna Brahmajosyula <vamsi-krishna.brahmajosyula@...adcom.com>
Cc: stable@...r.kernel.org, gregkh@...uxfoundation.org, yuxuanzhe@...look.com, 
	stfrench@...rosoft.com, sashal@...nel.org, senozhatsky@...omium.org, 
	tom@...pey.com, linux-cifs@...r.kernel.org, linux-kernel@...r.kernel.org, 
	ajay.kaher@...adcom.com, alexey.makhalov@...adcom.com, 
	vasavi.sirnapalli@...adcom.com
Subject: Re: [PATCH v6.1 0/2] ksmbd: fix potencial out-of-bounds when buffer
 offset is invalid

On Fri, Nov 15, 2024 at 5:32 PM Vamsi Krishna Brahmajosyula
<vamsi-krishna.brahmajosyula@...adcom.com> wrote:
>
> The dependent patch (slab-out-of-bounds) is backported from 6.7 instead of 6.6.
> In the 6.6 commit (9e4937cbc150f), the upstream commit id points to an incorrect one.
Looks good to me:)
Thanks for backporting ksmbd's fixes to stable 6.1 kernel.
>
> Namjae Jeon (2):
>   ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
>   ksmbd: fix potencial out-of-bounds when buffer offset is invalid
>
>  fs/smb/server/smb2misc.c | 26 ++++++++++++++++------
>  fs/smb/server/smb2pdu.c  | 48 ++++++++++++++++++++++------------------
>  2 files changed, 45 insertions(+), 29 deletions(-)
>
> --
> 2.39.4
>