ziming zhang f22c55a20a libceph: prevent potential out-of-bounds writes in handle_auth_session_key() ...

commit 7fce830ecd upstream.

The len field originates from untrusted network packets. Boundary
checks have been added to prevent potential out-of-bounds writes when
decrypting the connection secret or processing service tickets.

[ idryomov: changelog ]

Cc: stable@vger.kernel.org
Signed-off-by: ziming zhang <ezrakiez@gmail.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-12-07 06:09:36 +09:00

..

crush

…

armor.c

…

auth_none.c

…

auth_none.h

…

auth_x_protocol.h

…

auth_x.c

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

2025-12-07 06:09:36 +09:00

auth_x.h

…

auth.c

…

buffer.c

…

ceph_common.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-12-07 06:09:36 +09:00

ceph_hash.c

…

ceph_strings.c

…

cls_lock_client.c

…

crypto.c

…

crypto.h

…

debugfs.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-12-07 06:09:36 +09:00

decode.c

…

Kconfig

…

Makefile

…

messenger_v1.c

…

messenger_v2.c

…

messenger.c

libceph: fix invalid accesses to ceph_connection_v1_info

2025-10-02 13:39:01 +02:00

mon_client.c

libceph: fix race between delayed_work() and ceph_monc_stop()

2024-07-18 13:07:42 +02:00

msgpool.c

…

osd_client.c

libceph: fix potential hang in ceph_osdc_notify()

2023-08-11 15:13:55 +02:00

osdmap.c

…

pagelist.c

…

pagevec.c

…

snapshot.c

…

string_table.c

…

striper.c

…