Centos-kernel-stream-9/fs
Augusto Caringi 2160b29c8b Merge: CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/6805

JIRA: https://issues.redhat.com/browse/RHEL-87899
CVE: CVE-2025-21962

```
commit d5a30fddfe2f2e540f6c43b59cf701809995faef
Author: Murad Masimov <m.masimov@mt-integration.ru>
Date:   Tue Mar 11 17:22:06 2025 +0300

    cifs: Fix integer overflow while processing closetimeo mount option

    User-provided mount parameter closetimeo of type u32 is intended to have
    an upper limit, but before it is validated, the value is converted from
    seconds to jiffies which can lead to an integer overflow.

    Found by Linux Verification Center (linuxtesting.org) with SVACE.

    Fixes: 5efdd9122eff ("smb3: allow deferred close timeout to be configurable")
    Signed-off-by: Murad Masimov <m.masimov@mt-integration.ru>
    Signed-off-by: Steve French <stfrench@microsoft.com>```

Signed-off-by: CKI Backport Bot <cki-ci-bot+cki-gitlab-backport-bot@redhat.com>

---

<small>Created 2025-04-29 14:51 UTC by backporter - [KWF FAQ](https://red.ht/kernel_workflow_doc) - [Slack #team-kernel-workflow](https://redhat-internal.slack.com/archives/C04LRUPMJQ5) - [Source](https://gitlab.com/cki-project/kernel-workflow/-/blob/main/webhook/utils/backporter.py) - [Documentation](https://gitlab.com/cki-project/kernel-workflow/-/blob/main/docs/README.backporter.md) - [Report an issue](https://issues.redhat.com/secure/CreateIssueDetails!init.jspa?pid=12334433&issuetype=1&priority=4&summary=backporter+webhook+issue&components=kernel-workflow+/+backporter)</small>

Approved-by: Paulo Alcantara <paalcant@redhat.com>
Approved-by: Jay Shin <jaeshin@redhat.com>
Approved-by: Benjamin Coddington <bcodding@redhat.com>
Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>

Merged-by: Augusto Caringi <acaringi@redhat.com>
2025-05-21 18:34:52 -03:00
..
9p
adfs
affs
afs afs: Fix merge preference rule failure condition 2025-02-27 12:04:25 -04:00
autofs
befs
bfs
btrfs
cachefiles fscache,cachefiles: add prepare_ondemand_read() callback 2025-01-17 19:08:44 +08:00
ceph
coda
configfs
cramfs
crypto crypto,fs: Separate out hkdf_extract() and hkdf_expand() 2025-05-09 07:27:10 +02:00
debugfs
devpts
dlm
ecryptfs
efivarfs efi: vars: Don't drop lock in the middle of efivar_init() 2025-04-27 20:27:33 -04:00
efs
erofs erofs: promote to full support 2025-02-07 21:07:50 +08:00
exfat exfat: fix the infinite loop in exfat_readdir() 2025-01-21 17:23:41 +00:00
exportfs
ext2
ext4 Merge: ext4: fixes through upstream v6.11 2025-05-21 18:34:49 -03:00
f2fs fs: Move enum rw_hint into a new header file 2025-03-14 16:48:20 +08:00
fat
freevxfs
fscache
fuse
gfs2 gfs2: deallocate inodes in gfs2_create_inode 2025-04-24 23:12:00 +02:00
hfs
hfsplus
hostfs hostfs: fix dev_t handling 2025-02-07 17:06:40 -05:00
hpfs
hugetlbfs Merge: idmapped mount support for hugetlbfs 2025-05-14 12:37:27 -03:00
iomap Merge: iomap: zero range flush fixes 2025-04-17 16:29:45 -03:00
isofs
jbd2 jbd2: remove redundant assignement to variable err 2025-04-08 11:15:14 -04:00
jffs2
jfs
kernfs fs: super_set_uuid() 2025-02-07 17:06:38 -05:00
lockd lockd: define nlm_port_min,max with CONFIG_SYSCTL 2025-01-31 06:45:51 -05:00
minix
netfs
nfs Merge: NFS: Extend rdirplus mount option with "force|none" 2025-04-29 18:49:29 -03:00
nfs_common
nfsd Merge: [RHEL-9] Fix kNFSD leak of cl_revoked 2025-05-06 11:46:10 -03:00
nilfs2
nls
notify
ntfs
ocfs2 fs: super_set_uuid() 2025-02-07 17:06:38 -05:00
omfs
openpromfs
orangefs
overlayfs
proc proc: fix UAF in proc_get_inode() 2025-05-07 08:27:47 +08:00
pstore pstore: Add priv field to pstore_record for backend specific use 2025-04-27 20:27:33 -04:00
qnx4
qnx6
quota
ramfs mm: switch mm->get_unmapped_area() to a flag 2025-03-18 17:09:47 +01:00
reiserfs
romfs
smb Merge: CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option 2025-05-21 18:34:52 -03:00
squashfs
sysfs
sysv
tracefs
ubifs fs: super_set_uuid() 2025-02-07 17:06:38 -05:00
udf
ufs
unicode
vboxsf
verity bpf, fsverity: Add kfunc bpf_get_fsverity_digest 2025-02-24 12:01:43 -05:00
xfs Merge: iomap: zero range flush fixes 2025-04-17 16:29:45 -03:00
zonefs
Kconfig
Kconfig.binfmt
Makefile
aio.c
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf.c
binfmt_elf_fdpic.c
binfmt_elf_test.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
bpf_fs_kfuncs.c bpf: Add kfunc bpf_get_dentry_xattr() to read xattr from dentry 2025-02-26 09:14:12 -05:00
buffer.c Merge: kernel hung task hot unplugging SCSI devices under write workload 2025-04-29 18:49:33 -03:00
char_dev.c
compat_binfmt_elf.c
coredump.c
d_path.c
dax.c
dcache.c
direct-io.c block, fs: Restore the per-bio/request data lifetime fields 2025-03-14 16:48:20 +08:00
drop_caches.c
eventfd.c
eventpoll.c
exec.c Merge: CVE-2024-43882: exec: Fix ToCToU between perm check and set-uid/gid usage 2025-02-03 10:00:43 -05:00
fcntl.c fs: Propagate write hints to the struct block_device inode 2025-03-14 16:48:20 +08:00
fhandle.c
file.c
file_table.c
filesystems.c
fs-writeback.c
fs_context.c
fs_parser.c
fs_pin.c
fs_struct.c
fs_types.c
fsopen.c
init.c
inode.c Merge: CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&#38;iput() 2025-05-19 15:19:10 -03:00
internal.h
ioctl.c fs/ioctl: Add a comment to keep the logic in sync with LSM policies 2025-02-07 17:09:56 -05:00
kernel_read_file.c
libfs.c
locks.c
mbcache.c
mnt_idmapping.c
mount.h
mpage.c block, fs: Restore the per-bio/request data lifetime fields 2025-03-14 16:48:20 +08:00
namei.c security: Create file_truncate hook from path_truncate hook 2025-02-07 17:05:30 -05:00
namespace.c ipc,namespace: batch free ipc_namespace structures 2025-03-21 11:01:58 -04:00
nsfs.c
open.c security: Create file_truncate hook from path_truncate hook 2025-02-07 17:05:30 -05:00
pipe.c
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c fs: Export generic_atomic_write_valid() 2025-03-14 16:48:27 +08:00
readdir.c
remap_range.c
select.c
seq_file.c
signalfd.c
splice.c
stack.c
stat.c
statfs.c
super.c
sync.c
sysctls.c
timerfd.c
userfaultfd.c userfaultfd: move userfaultfd_ctx struct to header file 2025-04-18 08:40:02 -04:00
utimes.c
xattr.c