linux-kernel - [PATCH 0/4] smb: Backport UAF fixes for v5.4.y

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20250811094639.37446-1-chanho.min@lge.com>
Date: Mon, 11 Aug 2025 18:46:35 +0900
From: Chanho Min <chanho.min@....com>
To: Steve French <sfrench@...ba.org>,
	linux-cifs@...r.kernel.org
Cc: samba-technical@...ts.samba.org,
	linux-kernel@...r.kernel.org,
	gunho.lee@....com,
	gregkh@...uxfoundation.org,
	sashal@...nel.org,
	Chanho Min <chanho.min@....com>
Subject: [PATCH 0/4] smb: Backport UAF fixes for v5.4.y

This patch series backports four fixes from v5.10.y and later to the v5.4.y,
addressing potential UAF issues in the SMB client implementation.
The patches have been adapted to account for the directory rename from fs/smb/client/*
to fs/cifs/* in v5.4.y, ensuring compatibility with the target kernel.

Paulo Alcantara (4):
  smb: client: fix potential UAF in cifs_debug_files_proc_show()
  smb: client: fix potential UAF in is_valid_oplock_break()
  smb: client: fix potential UAF in smb2_is_valid_lease_break()
  smb: client: fix potential UAF in cifs_stats_proc_write()

 fs/cifs/cifs_debug.c | 4 ++++
 fs/cifs/cifsglob.h   | 8 ++++++++
 fs/cifs/misc.c       | 2 ++
 fs/cifs/smb2misc.c   | 3 ++-
 4 files changed, 16 insertions(+), 1 deletion(-)