Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1d9cad9c5873097ea141ffc5da1e7921ce765aa8 to < 513f6cf2e906a504b7ab0b62b2eea993a6f64558affected5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to < 9968fcf02cf6b0f78fbacf3f63e782162603855aaffected5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to < 6c13fcb7cf59ae65940da1dfea80144e42921e53affected5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to < 1c46673be93dd2954f44fe370fb4f2b8e6214224affected5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to < b24edd5c191c2689c59d0509f0903f9487eb6317affected5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to < d5a30fddfe2f2e540f6c43b59cf701809995faefaffected5.15.107 to < 5.15.180affected
Linux Linux
Default version status: affected
6.0affected0 to < 6.0unaffected5.15.180 to ≤ 5.15.*unaffected6.1.132 to ≤ 6.1.*unaffected6.6.84 to ≤ 6.6.*unaffected6.12.20 to ≤ 6.12.*unaffected6.13.8 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/513f6cf2e906a504b7ab0b62b2eea993a6f64558 ↗
- https://git.kernel.org/stable/c/9968fcf02cf6b0f78fbacf3f63e782162603855a ↗
- https://git.kernel.org/stable/c/6c13fcb7cf59ae65940da1dfea80144e42921e53 ↗
- https://git.kernel.org/stable/c/1c46673be93dd2954f44fe370fb4f2b8e6214224 ↗
- https://git.kernel.org/stable/c/b24edd5c191c2689c59d0509f0903f9487eb6317 ↗
- https://git.kernel.org/stable/c/d5a30fddfe2f2e540f6c43b59cf701809995faef ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗