ACK: [SRU][J][PATCH 0/1] CVE-2024-26822

[Yuxuan Luo]

On Tue, Nov 12, 2024 at 03:33:19PM +0100, Massimiliano Pellizzer wrote:

Acked-by: Yuxuan Luo <yuxuan.luo at canonical.com>

> [Impact]
> 
> smb: client: set correct id, uid and cruid for multiuser automounts
> 
> When uid, gid and cruid are not specified, we need to dynamically
> set them into the filesystem context used for automounting otherwise
> they'll end up reusing the values from the parent mount.
> 
> [Fix]
> 
> Noble:	Fixed
> Jammy:	Backported from linux-6.6.y
> Focal:	Not affected
> Bionic:	Not affected
> Xenial:	Not affected
> 
> [Test Case]
> 
> Compile tested only.
> 
> [Where problems could occur]
> 
> The fix affects the CIFS/SMB subsystem. An issue with this fix may lead
> to kernel crashes or system instability during operation involving
> multiuser automounts. This may impact file access and sharing over SMB
> network shares.
> 
> Paulo Alcantara (1):
>   smb: client: set correct id, uid and cruid for multiuser automounts
> 
>  fs/cifs/cifs_dfs_ref.c | 16 ++++++++++++++++
>  1 file changed, 16 insertions(+)
> 
> -- 
> 2.43.0
> 
> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team