ACK: [SRU][Jammy/Kinetic][PATCH 0/1] CVE-2022-48502

[Roxana Nicolescu]

On 28/06/2023 21:43, Yuxuan Luo wrote:
> [Impact]
> An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem
> does not properly check for correctness during disk reads, leading to an
> out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.
>
> [Backport]
> It is a clean cherry pick.
>
> [Test]
> Compile and smoke tested.
>
> [Potential Regression]
> Expect very low regression potential.
>
> Konstantin Komarov (1):
>    fs/ntfs3: Check fields while reading
>
>   fs/ntfs3/index.c   |  84 ++++++++++++++++++++++++++++++----
>   fs/ntfs3/inode.c   |  18 ++++----
>   fs/ntfs3/ntfs_fs.h |   4 +-
>   fs/ntfs3/run.c     |   7 ++-
>   fs/ntfs3/xattr.c   | 109 +++++++++++++++++++++++++++++----------------
>   5 files changed, 164 insertions(+), 58 deletions(-)
>
Acked-by: Roxana Nicolescu <roxana.nicolescu at canonical.com>