APPLIED [OEM-5.14] Re: [SRU J/K/HWE-5.17/OEM-5.14 0/8] CVE-2022-43945 - NFSD buffer overflow

[Timo Aaltonen]

Thadeu Lima de Souza Cascardo kirjoitti 11.11.2022 klo 15.48:
> [Impact]
> A malicious client can cause a buffer overflow on the nfsd server by sending
> a crafted RPC message.
> 
> [Backport]
> For 5.14, 5.15, 5.17 and 5.19, these are all clean cherry-picks. Backports
> for older kernel versions is in progress.
> 
> [Potential regression]
> NFSD servers might misbehave.
> 
> Chuck Lever (8):
>    SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation
>    SUNRPC: Fix svcxdr_init_encode's buflen calculation
>    NFSD: Protect against send buffer overflow in NFSv2 READDIR
>    NFSD: Protect against send buffer overflow in NFSv3 READDIR
>    NFSD: Protect against send buffer overflow in NFSv2 READ
>    NFSD: Protect against send buffer overflow in NFSv3 READ
>    NFSD: Remove "inline" directives on op_rsize_bop helpers
>    NFSD: Cap rsize_bop result based on send buffer size
> 
>   fs/nfsd/nfs3proc.c         |  11 +--
>   fs/nfsd/nfs4proc.c         | 169 ++++++++++++++++++++++---------------
>   fs/nfsd/nfsproc.c          |   6 +-
>   fs/nfsd/xdr4.h             |   3 +-
>   include/linux/sunrpc/svc.h |  19 ++++-
>   5 files changed, 125 insertions(+), 83 deletions(-)
> 

applied to oem-5.14, thanks

-- 
t