oss-security - Re: CVE request -- kernel: cifs: always do is_path_accessible check in cifs

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 26 Sep 2011 10:24:36 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: akuster <akuster@...sta.com>, Josh Bressers <bressers@...hat.com>,
        coley@...us.mitre.org, cve-assign@...re.org
Subject: Re: CVE request -- kernel: cifs: always do is_path_accessible
 check in cifs_mount

On 09/23/2011 11:18 PM, akuster wrote:
> so this was introduced by e4cce94c9c8797b08faf6a79396df4d175e377fa ?

Yes,

[CIFS] Prevent OOPs when mounting with remote prefixpath.
e4cce94c9c8797b08faf6a79396df4d175e377fa

If you have this, you might also want
cifs: add fallback in is_path_accessible for old servers
221d1d797202984cb874e3ed9f1388593d34ee22

Thanks, Eugene

> - Armin
> 
> On 09/14/2011 08:51 AM, Josh Bressers wrote:
>> Please use CVE-2011-3363 for this.
>>
>> Thanks.
>>

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.