Lei LuandGreg Kroah-Hartman 81cec07d30 sunrpc: fix null pointer dereference on zero-length checksum ...

commit 6df164e29b upstream.

In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes
checksum.data to be set to NULL. This triggers a NPD when accessing
checksum.data in gss_krb5_verify_mic_v2(). This patch ensures that
the value of checksum.len is not less than XDR_UNIT.

Fixes: 0653028e8f ("SUNRPC: Convert gss_verify_header() to use xdr_stream")
Cc: stable@kernel.org
Signed-off-by: Lei Lu <llfamsec@gmail.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-10-15 11:58:09 +02:00

..

auth_gss

sunrpc: fix null pointer dereference on zero-length checksum

2025-10-15 11:58:09 +02:00

xprtrdma

svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()

2024-12-09 10:32:30 +01:00

.kunitconfig

…

addr.c

…

auth_null.c

…

auth_tls.c

…

auth_unix.c

…

auth.c

…

backchannel_rqst.c

…

cache.c

sunrpc: suppress warnings for unused procfs functions

2025-03-07 16:45:37 +01:00

clnt.c

sunrpc: don't immediately retransmit on seqno miss

2025-07-06 11:00:05 +02:00

debugfs.c

…

fail.h

…

Kconfig

…

Makefile

…

netns.h

…

rpc_pipe.c

…

rpcb_clnt.c

SUNRPC: rpcbind should never reset the port to the value '0'

2025-06-04 14:41:55 +02:00

sched.c

Revert "SUNRPC: Don't allow waiting for exiting tasks"

2025-09-19 16:32:03 +02:00

socklib.c

…

socklib.h

…

stats.c

sunrpc: use the struct net as the svc proc private

2024-08-19 06:04:23 +02:00

sunrpc_syms.c

…

sunrpc.h

…

svc_xprt.c

…

svc.c

sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

2025-06-27 11:09:00 +01:00

svcauth_unix.c

…

svcauth.c

…

svcsock.c

net: better track kernel sockets lifetime

2025-08-28 16:28:39 +02:00

sysctl.c

…

sysfs.c

…

sysfs.h

…

timer.c

…

xdr.c

…

xprt.c

…

xprtmultipath.c

…

xprtsock.c

SUNRPC: call xs_sock_process_cmsg for all cmsg

2025-09-19 16:32:01 +02:00