oss-security - Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20100518155034.GA26710@kroah.com>
Date: Tue, 18 May 2010 08:50:34 -0700
From: Greg KH <greg@...ah.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: kernel: cifs: cifs_create() NULL
 pointer dereference

On Mon, Apr 05, 2010 at 04:56:03PM +0800, Eugene Teo wrote:
> On 04/05/2010 04:51 PM, Eugene Teo wrote:
> >Reported by Eugene Teo. While creating a file on a server which supports
> >Unix extensions such as Samba, if a file being created does not supply
> >nameidata (i.e. nd is NULL), cifs client can trigger a NULL pointer
> >dereference when calling cifs_posix_open().
> >
> >http://comments.gmane.org/gmane.linux.file-systems.cifs/5782
> >https://bugzilla.redhat.com/579445
> 
> The code that introduced this is upstream commit c3b2a0c6. Any
> kernel version from v2.6.29-rc6 onwards are affected.

Am I correct in that I do not see a fix for this in the upstream kernel
repository yet?

thanks,

greg k-h

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.