oss-security - CVE request: kernel: cifs: cifs_create() NULL pointer dereference

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4BB9A4A7.60503@kernel.sg>
Date: Mon, 05 Apr 2010 16:51:51 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: cifs: cifs_create() NULL pointer dereference

Reported by Eugene Teo. While creating a file on a server which supports 
Unix extensions such as Samba, if a file being created does not supply 
nameidata (i.e. nd is NULL), cifs client can trigger a NULL pointer 
dereference when calling cifs_posix_open().

http://comments.gmane.org/gmane.linux.file-systems.cifs/5782
https://bugzilla.redhat.com/579445

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.