oss-sec mailing list archives

Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference


From: Eugene Teo <eugene () redhat com>
Date: Wed, 19 May 2010 09:10:13 +0800

http://comments.gmane.org/gmane.linux.file-systems.cifs/5782
https://bugzilla.redhat.com/579445

The code that introduced this is upstream commit c3b2a0c6. Any
kernel version from v2.6.29-rc6 onwards are affected.

Am I correct in that I do not see a fix for this in the upstream kernel
repository yet?

Yes. IIRC, the developers don't think this is exploitable. I didn't look at this further as it has a lower priority for me and our supported kernels are not affected.

Eugene


Current thread: