[SRU][Jammy][PATCH 0/1] CVE-2022-4379

Andrei Gherzan andrei.gherzan at canonical.com
Mon Jan 23 15:38:43 UTC 2023


[Impact]

A use-after-free vulnerability was found in __nfs42_ssc_open() in
fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to
conduct a remote denial.

[Fix]

Backported 75333d48f92256a0dec91dbf07835e804fc411c0 from upstream.
Backport was required (see the patch for more details).

[Potential regression]

None expected, low.

[Tests]

* Build test
* Runtime test
  * boot a new Kinetic VM instance
  * loaded nfsd kernel module
  * exported on the VM a path and mounted on a client via NFSv4
  * no errors or functionality impact observed

Dai Ngo (1):
  NFSD: fix use-after-free in __nfs42_ssc_open()

 fs/nfsd/nfs4proc.c | 22 ++++++----------------
 1 file changed, 6 insertions(+), 16 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list