linux-kernel - [PATCH 0/4] cifs: Fix integer overflow while processing mount options

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250311142206.2045-1-m.masimov@mt-integration.ru>
Date: Tue, 11 Mar 2025 17:22:02 +0300
From: Murad Masimov <m.masimov@...integration.ru>
To: Steve French <sfrench@...ba.org>
CC: Paulo Alcantara <pc@...guebit.com>, Ronnie Sahlberg
	<ronniesahlberg@...il.com>, Shyam Prasad N <sprasad@...rosoft.com>, Tom
 Talpey <tom@...pey.com>, Bharath SM <bharathsm@...rosoft.com>, Jeff Layton
	<jlayton@...nel.org>, Suresh Jayaraman <sjayaraman@...e.de>, "Paulo Alcantara
 (SUSE)" <pc@....nz>, <linux-cifs@...r.kernel.org>,
	<samba-technical@...ts.samba.org>, <linux-kernel@...r.kernel.org>,
	<lvc-project@...uxtesting.org>, Murad Masimov <m.masimov@...integration.ru>
Subject: [PATCH 0/4] cifs: Fix integer overflow while processing mount options

These patches fix similar issues that have different origin commits.
User-provided mount parameters are intended to have upper limits, but
are validated after their values are converted from seconds to jiffies,
which can lead to an integer overflow.

Murad Masimov (4):
  cifs: Fix integer overflow while processing acregmax mount option
  cifs: Fix integer overflow while processing acdirmax mount option
  cifs: Fix integer overflow while processing actimeo mount option
  cifs: Fix integer overflow while processing closetimeo mount option

 fs/smb/client/fs_context.c | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

--
2.39.2