ACK: [SRU][Jammy-OEM-5.17/OEM-6.0][PATCH 0/1] CVE-2022-4842

Cengiz Can cengiz.can at canonical.com
Mon Jun 12 02:26:29 UTC 2023


On Fri, 2023-06-09 at 14:00 -0400, Yuxuan Luo wrote:
> [Impact]
> The bug occours due to a misuse of `attr` variable instead of
> `attr_b`.  `attr`
> is being initialized as NULL, then being derenfernced as `attr-
> >res.data_size`.
> This bug causes a crash of the ntfs3 driver itself, If compiled
> directly to the
> kernel, it crashes the whole system.
> 
> [Backport]
> It is a clean cherry pick.
> 
> [Test]
> Compile and smoke tested.
> 
> [Potential Regression]
> Expect minimal regression potential restricted within the scope.
> 
> Alon Zahavi (1):
>   fs/ntfs3: Fix attr_punch_hole() null pointer derenference
> 

Acked-by: Cengiz Can <cengiz.can at canonical.com>

>  fs/ntfs3/attrib.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> -- 
> 2.34.1
> 
> 




More information about the kernel-team mailing list