oss-sec mailing list archives

Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference


From: Josh Bressers <bressers () redhat com>
Date: Mon, 5 Apr 2010 21:03:02 -0400 (EDT)


----- "Eugene Teo" <eugeneteo () kernel sg> wrote:

Reported by Eugene Teo. While creating a file on a server which
supports 
Unix extensions such as Samba, if a file being created does not supply

nameidata (i.e. nd is NULL), cifs client can trigger a NULL pointer 
dereference when calling cifs_posix_open().

http://comments.gmane.org/gmane.linux.file-systems.cifs/5782
https://bugzilla.redhat.com/579445


Please use CVE-2010-1148

Thanks.

-- 
    JB


Current thread: