[PATCH 0/4] smb: Backport UAF fixes for v5.4.y

Chanho Min posted 4 patches 1 month, 3 weeks ago
fs/cifs/cifs_debug.c | 4 ++++
fs/cifs/cifsglob.h   | 8 ++++++++
fs/cifs/misc.c       | 2 ++
fs/cifs/smb2misc.c   | 3 ++-
4 files changed, 16 insertions(+), 1 deletion(-)
[PATCH 0/4] smb: Backport UAF fixes for v5.4.y
Posted by Chanho Min 1 month, 3 weeks ago
This patch series backports four fixes from v5.10.y and later to the v5.4.y,
addressing potential UAF issues in the SMB client implementation.
The patches have been adapted to account for the directory rename from fs/smb/client/*
to fs/cifs/* in v5.4.y, ensuring compatibility with the target kernel.

Paulo Alcantara (4):
  smb: client: fix potential UAF in cifs_debug_files_proc_show()
  smb: client: fix potential UAF in is_valid_oplock_break()
  smb: client: fix potential UAF in smb2_is_valid_lease_break()
  smb: client: fix potential UAF in cifs_stats_proc_write()

 fs/cifs/cifs_debug.c | 4 ++++
 fs/cifs/cifsglob.h   | 8 ++++++++
 fs/cifs/misc.c       | 2 ++
 fs/cifs/smb2misc.c   | 3 ++-
 4 files changed, 16 insertions(+), 1 deletion(-)
Re: [PATCH 0/4] smb: Backport UAF fixes for v5.4.y
Posted by Greg KH 1 month, 1 week ago
On Mon, Aug 11, 2025 at 06:46:35PM +0900, Chanho Min wrote:
> This patch series backports four fixes from v5.10.y and later to the v5.4.y,
> addressing potential UAF issues in the SMB client implementation.
> The patches have been adapted to account for the directory rename from fs/smb/client/*
> to fs/cifs/* in v5.4.y, ensuring compatibility with the target kernel.
> 
> Paulo Alcantara (4):
>   smb: client: fix potential UAF in cifs_debug_files_proc_show()
>   smb: client: fix potential UAF in is_valid_oplock_break()
>   smb: client: fix potential UAF in smb2_is_valid_lease_break()
>   smb: client: fix potential UAF in cifs_stats_proc_write()
> 
>  fs/cifs/cifs_debug.c | 4 ++++
>  fs/cifs/cifsglob.h   | 8 ++++++++
>  fs/cifs/misc.c       | 2 ++
>  fs/cifs/smb2misc.c   | 3 ++-
>  4 files changed, 16 insertions(+), 1 deletion(-)
> 

We need these in newer kernels as well, otherwise you will have a
regression when moving to a new tree.  Please resend patches for all of
the relevant trees and we will be glad to take them.

thanks,

greg k-h