Received: by 2002:a89:d88:0:b0:1fa:5c73:8e2d with SMTP id eb8csp536620lqb; Fri, 24 May 2024 06:16:20 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCXmEtsjLXkOz67hIS4Tkhczatf79tx4NDdefWUIXJRluvcz+TFnU5c56avOFDOusuNClJ2ntvQJISRxpHwU8HdHuNKxvYfJ0oS0LvyM/A== X-Google-Smtp-Source: AGHT+IGAJRi0IGBo7JSHQCfX+swTEB4dW76mQHzH3BpeQqc2o9HdTzWxAvBRp6SONG0Wwk0A4jEQ X-Received: by 2002:a05:6a21:2709:b0:1af:f38e:85b with SMTP id adf61e73a8af0-1b205c8ad49mr6254362637.10.1716556580623; Fri, 24 May 2024 06:16:20 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1716556580; cv=pass; d=google.com; s=arc-20160816; b=qKENa2J7xGY2Itnh24wDo8/NcXaACzhv1yF8rdK1UyYSKnaEuA551DBP9LbPFQ3OT+ Y6LxXZ7PYZbXgquL9Mb0WIR5l9nSIZbNKmYn4Fc2qC3l+x5MCzzga3r20WR5pkSPy5IJ JGMdRU3v715dmHLeUXUKad19t3XZag7dWIEE5A7mUxjr0wgRBzeUmcyhRQCP6d6o7Ohf ilu8rL+ANE6j5iLO5tqxLH9gKvpsC9m9T6qHlOHOVyTRrrg91mIP5mh47s28qCcK4xPj 73TcNc7wd36ynV7ZpDArTctLsFDjxCnw852p7Sbz4DrFrf1Rg2Y+oPMq7lWS449n8j/m HUoA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=in-reply-to:content-disposition:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:references:message-id:subject:cc :to:from:date:dkim-signature; bh=yvRey41cSJ4Tx9YDykOWJwTCnmPWvyr7huBbbI0JBE4=; fh=gfHXw7OThOC1cQLO1x4bXg1tCpYL/w6NWLnb/WwW4OY=; b=VGKRkkYwCxUBMpEr2vObWRXj4aH2yIziDObNFKSmyQNQl27jScORzEQFLnoVYe6iRA Mz7LuKgfFafkiV4459As1R27XnjPvVvjx3Q1KdFXCIrHzoA2fBn2GbSAnGy8PrSfR+AN scwigfNsHPMXiPq2HDJ5BTm+uBOpbUvE4l9nWJr+WtvfiGKcxUZe0TYV2DSYSQLpS6aV CboTFG7tW22mHEcfNunCbqrDUlos/oNGAgo0KKcQ95ApIqsKtHU5v9YhsJKD2mMKKGHL tCbPm7Setdi0klrjEcYNsVtGM3T8Ofw+Hob+C6E1kMRk8iaqXwjFkfCapa+OhMuXw6D7 RQbg==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=mhXiuan4; arc=pass (i=1 dkim=pass dkdomain=kernel.org); spf=pass (google.com: domain of linux-kernel+bounces-188717-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:40f1:3f00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-188717-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from sy.mirrors.kernel.org (sy.mirrors.kernel.org. [2604:1380:40f1:3f00::1]) by mx.google.com with ESMTPS id 41be03b00d2f7-68221c6b1d2si1264212a12.126.2024.05.24.06.16.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 24 May 2024 06:16:20 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-188717-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:40f1:3f00::1 as permitted sender) client-ip=2604:1380:40f1:3f00::1; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=mhXiuan4; arc=pass (i=1 dkim=pass dkdomain=kernel.org); spf=pass (google.com: domain of linux-kernel+bounces-188717-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:40f1:3f00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-188717-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sy.mirrors.kernel.org (Postfix) with ESMTPS id D15EDB2199B for ; Fri, 24 May 2024 13:16:17 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id EB0AB8663E; Fri, 24 May 2024 13:16:11 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="mhXiuan4" Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1EF8484FCC; Fri, 24 May 2024 13:16:11 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716556571; cv=none; b=EumInHy5xXrp8lxT4S3mSoSKtQ4K3pEaRbNJYGguv+GWc9Rp5Ea3ZT0fb8OePlxyVyCW18dEEm0cERdNEghMuTcYPvLCyK8goek9xU0z2QfUsLC/r91Z5V/j8MDAOdO/c04yFSm38SlIJntVTBn9PcENRdRO0oiLqvUgYz97fo8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716556571; c=relaxed/simple; bh=yvRey41cSJ4Tx9YDykOWJwTCnmPWvyr7huBbbI0JBE4=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=nNUx8CVGCuIiW8bXAf8klP0FglWjIMzfxA4lgvQZfSovHozFpOmvbxZ/fudw0SmIJRhXnF/U/e6mq2J9uU9tQy/cnFYZSS79BdF2jwf8ZL5pSHfTkld9WLFs+qMTjHfQ830E0ZVv3KnoCcA2MgO+u7z/5xKHD65K5zCKBV3b54g= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=mhXiuan4; arc=none smtp.client-ip=10.30.226.201 Received: by smtp.kernel.org (Postfix) with ESMTPSA id 4C9D8C2BBFC; Fri, 24 May 2024 13:16:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1716556570; bh=yvRey41cSJ4Tx9YDykOWJwTCnmPWvyr7huBbbI0JBE4=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=mhXiuan4XxFbIV+CDscdknyvp54IwIuob57viQ+5r1lkUs6hmDRVC2aIJZmg3sG+m Oe07dYaqPbkgCXuS5kgSADrNU8da5eMbHu3SX8D4lXT5a5HBis29zAr2vh64dRFux2 PMW0LACWuEZq3ivIVFQ/sgFuEO9q2JVVPxkVxUZE0oyhBYnh8Hrj3s8OAtpaPpbvKT dv0ffKf/NvZEU3PnW6jQkMZ7Qf/qKM2M78udslgaF1QuGgooOtNqKDcWnwzg8+ozWB IEjIzvYCK2Ba2XlAI9I8B0TRdmIKXSuI8w18UjpbNcpNqtrGGjlaw6ek5CRaK9H3PY 5J2eRRmiEl6cw== Date: Fri, 24 May 2024 15:16:07 +0200 From: Christian Brauner To: Greg Kroah-Hartman Cc: Anthony Iliopoulos , cve@kernel.org, linux-kernel@vger.kernel.org, linux-cve-announce@vger.kernel.org Subject: Re: CVE-2024-26821: fs: relax mount_setattr() permission checks Message-ID: <20240524-denkbar-rechnen-470d602cf601@brauner> References: <2024041702-CVE-2024-26821-de6b@gregkh> <20240514124939.77984-1-ailiop@suse.com> <2024052328-favorably-gesture-7495@gregkh> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <2024052328-favorably-gesture-7495@gregkh> > I'll defer to Christian if this CVE should be revoked or not. As per my other mail, this really isn't a CVE.