linux-kernel - Re: [PATCH 0/4] smb: Backport UAF fixes for v5.4.y

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <2025082410-finless-amused-5edc@gregkh>
Date: Sun, 24 Aug 2025 10:47:41 +0200
From: Greg KH <gregkh@...uxfoundation.org>
To: Chanho Min <chanho.min@....com>
Cc: Steve French <sfrench@...ba.org>, linux-cifs@...r.kernel.org,
	samba-technical@...ts.samba.org, linux-kernel@...r.kernel.org,
	gunho.lee@....com, sashal@...nel.org
Subject: Re: [PATCH 0/4] smb: Backport UAF fixes for v5.4.y

On Mon, Aug 11, 2025 at 06:46:35PM +0900, Chanho Min wrote:
> This patch series backports four fixes from v5.10.y and later to the v5.4.y,
> addressing potential UAF issues in the SMB client implementation.
> The patches have been adapted to account for the directory rename from fs/smb/client/*
> to fs/cifs/* in v5.4.y, ensuring compatibility with the target kernel.
> 
> Paulo Alcantara (4):
>   smb: client: fix potential UAF in cifs_debug_files_proc_show()
>   smb: client: fix potential UAF in is_valid_oplock_break()
>   smb: client: fix potential UAF in smb2_is_valid_lease_break()
>   smb: client: fix potential UAF in cifs_stats_proc_write()
> 
>  fs/cifs/cifs_debug.c | 4 ++++
>  fs/cifs/cifsglob.h   | 8 ++++++++
>  fs/cifs/misc.c       | 2 ++
>  fs/cifs/smb2misc.c   | 3 ++-
>  4 files changed, 16 insertions(+), 1 deletion(-)
> 

We need these in newer kernels as well, otherwise you will have a
regression when moving to a new tree.  Please resend patches for all of
the relevant trees and we will be glad to take them.

thanks,

greg k-h