Received: by 2002:a89:2c3:0:b0:1ed:23cc:44d1 with SMTP id d3csp957840lqs; Wed, 6 Mar 2024 01:48:20 -0800 (PST) X-Forwarded-Encrypted: i=3; AJvYcCVcbV9NzXoXy+t2NDt/rkenZSN1zjryhUrudX+ooI2yJCZ7pMvAeP3xjnWrd3QtbNx8N0Dodm89/1gik0uRgsgS10m0NiEkhnkO/duZ5Q== X-Google-Smtp-Source: AGHT+IEEpF69rEIJ3T/Zy0J2i4rWtOepF29LtYEbIJ+hp8yX7fZYqEPHM7/x3UDXHWSZM0lbtcMm X-Received: by 2002:a17:90a:98f:b0:29b:2d0f:a94 with SMTP id 15-20020a17090a098f00b0029b2d0f0a94mr11432276pjo.0.1709718500650; Wed, 06 Mar 2024 01:48:20 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1709718500; cv=pass; d=google.com; s=arc-20160816; b=TPOHUKuQwK/0+7zu+8gg725BQ92iZfy0UTAnngQaGp/qMPNrWWRKggiMIZ7yuRWZRA sFlo76TIE/1K3axqfLBw6C89DZe1U4musk6BXjDFIjwRCXiCQoL8Ed+zQjjIfAwXDxev bGFem5iMesu066WePCMQF6wQ6jVOVgAtNo2XROz6TXWs0C7zaPilf6fuz8eH3fdVUyKY ngNdraKhtqp96tKaqcp6rQ0gWhcBNr2DSR9hHIdbLAtL/WAEWQm+FCDJ8NqQ8x8M2qeg wyBiUbwZF0UD6jm4J+1jlqGUSEWHCH89huTDxd3FKDYJuznyV3uFVRqY2LC3VFVs4WPP ERig== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=in-reply-to:content-disposition:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:references:message-id:subject:cc :to:from:date:dkim-signature; bh=1k8T22CNK0RwU/dnnLzR0OYvfLLM4orETpOAA9+bCxw=; fh=W+LT8lmIuU95NTpPQvAZ7TirWfthoR3Gk4QeenSiJ8U=; b=cXarQjbCgPAQNpsIVL5FaPE3w5nluYJFiM4ZYj9VJS3FvJabyQHdtudPGh67riqPzy Ubo9wU0tE7ScpwIbttdjmt2XCnvDCzt/vmvXLf7flbhMMaHulpSyu69n282Rymr5LUJ2 s4Wtepy6ZZpNJuZIeROcFhgNVGYs4ejgyCHkJkXberolGUOy7OO1zJsmdQKnYs2Nu8UG Gdmq4oXBR6aUlGLlGcDd84LrKfwcysniOcLRA0f5u3/qqk4HkfCAPZRbT95VZ1kof9AQ Kv/SNsj4atyPPq7Aqz04oH0/Btxi63HV7JAbcoHh146+kY9SRopIrS9oEz+IYLtuW6Uy tGHA==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=DHBvkgBw; arc=pass (i=1 dkim=pass dkdomain=linuxfoundation.org); spf=pass (google.com: domain of linux-kernel+bounces-93660-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) smtp.mailfrom="linux-kernel+bounces-93660-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Return-Path: Received: from sv.mirrors.kernel.org (sv.mirrors.kernel.org. [139.178.88.99]) by mx.google.com with ESMTPS id b16-20020a17090a101000b0029b7857a18esi808414pja.18.2024.03.06.01.48.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Mar 2024 01:48:20 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-93660-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99; Authentication-Results: mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=DHBvkgBw; arc=pass (i=1 dkim=pass dkdomain=linuxfoundation.org); spf=pass (google.com: domain of linux-kernel+bounces-93660-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) smtp.mailfrom="linux-kernel+bounces-93660-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sv.mirrors.kernel.org (Postfix) with ESMTPS id F40672860DF for ; Wed, 6 Mar 2024 09:47:30 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 914855F49C; Wed, 6 Mar 2024 09:45:37 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="DHBvkgBw" Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 8BA105FB87 for ; Wed, 6 Mar 2024 09:45:36 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1709718336; cv=none; b=cLnQGwcbuDBcaLNfS0p80cp1+AgIwZmnbXJ0I+Jwfp8XbKBFHtyXqymp1f2UYNt+zHlIIz6H5bSc1cuVXLafdcBsMtx07pQoBvGpJ2IFS51q0LSw5HGzMeruqmIn3EffO34/t3UFLVzbv3nXXUdHRbFgZFZZqKpyFpVALAp3cno= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1709718336; c=relaxed/simple; bh=jebW8we+cUG2aEk13ghQQc3XUD55Lgpy4/ET3ixo2uE=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=qkxevVxk/4cxt2PlB9eoMxMetduXgp/YO+POihBe26g5LGnsSXLYGNijCN+JddTWYRaFGTTaHJ7xn32Qqk8EZ4pzjn8lM4C17VkMaTQrB1KcXZeuBs0GbsChZnFWpz0+rjGERlSoPTatxWD7jgj0khLAGtYmTKMJ7npPf5Bx9dc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=DHBvkgBw; arc=none smtp.client-ip=10.30.226.201 Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9E659C433F1; Wed, 6 Mar 2024 09:45:35 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1709718336; bh=jebW8we+cUG2aEk13ghQQc3XUD55Lgpy4/ET3ixo2uE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=DHBvkgBwWqD3hMgQyCM1gAqRY5SYMmelwWoKm+8VUINZF+lf0tdHFXqRnPRa1DvMD 8RNNKFKyExoVg9djeiNCBAXWDgQMAJyKKLtzVySqHqogGuy2ekne1dBNvSgxW3UfE5 v/Dcu3bIH8Ty2G3wPj5M890sTA0oXIloRuHFZ8qw= Date: Wed, 6 Mar 2024 09:45:33 +0000 From: Greg KH To: Robert Frohl Cc: Red Hat Product Security , security@suse.de, cve@kernel.org, linux-kernel@vger.kernel.org Subject: Re: CVE-2023-52572: cifs: Fix UAF in cifs_demultiplex_thread() Message-ID: <2024030635-alibi-obtrusive-133e@gregkh> References: <15436477.7601.1709663408600@app142018.ycg3.service-now.com> <2024030628-skyline-contently-4b85@gregkh> <265fb3da-8961-4f4f-8f81-c271e5aceebc@suse.de> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <265fb3da-8961-4f4f-8f81-c271e5aceebc@suse.de> On Wed, Mar 06, 2024 at 10:23:37AM +0100, Robert Frohl wrote: > On 06.03.24 10:16, Greg KH wrote: > > On Tue, Mar 05, 2024 at 10:30:08AM -0800, Red Hat Product Security wrote: > > > > > > Hello Robert, > > > Thank you for reaching to Red Hat Product Security. > > > I have reviewed the flaws, CVE-2023-1192 has the correct patch used in the reference. > > > > What do you mean by "reference"? > > > > CVE-2023-1192 points to a patch for a totally different filesystem > > (ntfs3). Will that be fixed? > > This is also stated in the RH bugzilla, that the initial patch was wrong: > https://bugzilla.redhat.com/show_bug.cgi?id=2154178#c28 Ok, so what will RH be doing here? confused, greg k-h