APPLIED Re: [UBUNTU OEM-6.0 0/2] CVE-2022-43945

[Timo Aaltonen]

Thadeu Lima de Souza Cascardo kirjoitti 27.1.2023 klo 20.32:
> [Impact]
> A malicious client can cause a buffer overflow on the nfsd server by sending
> a crafted RPC message.
> 
> [Backport]
> Missing two commits on 6.0 that were already applied to other kernels.
> 
> [Potential regression]
> NFSD servers might misbehave.
> 
> Chuck Lever (2):
>    NFSD: Remove "inline" directives on op_rsize_bop helpers
>    NFSD: Cap rsize_bop result based on send buffer size
> 
>   fs/nfsd/nfs4proc.c | 169 ++++++++++++++++++++++++++-------------------
>   fs/nfsd/xdr4.h     |   3 +-
>   2 files changed, 101 insertions(+), 71 deletions(-)
> 

applied to oem-6.0, thanks

-- 
t