Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the current task credentials. Run ADS I/O with the credentials captured when the SMB handle was opened.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f44158485826c076335d6860d35872271a83791d to < 222c4c52c3af2d0f68de31182710df3508a31095affectedf44158485826c076335d6860d35872271a83791d to < 2ad5509dd576ae16d252d4698daf03002f9e0234affectedf44158485826c076335d6860d35872271a83791d to < a8f5d39971bbad9340d49cd41b0e2da9452a649daffectedf44158485826c076335d6860d35872271a83791d to < 2b4592cea214683de0f2ce6f8c22c097fb0ea1abaffectedf44158485826c076335d6860d35872271a83791d to < 52a56cf53ec834c44ac1b4d16d585f26613ee5ceaffectedf44158485826c076335d6860d35872271a83791d to < baa5e094886fffa7e6272edcb5e08be5ce28262caffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.96 to ≤ 6.12.*unaffected6.18.39 to ≤ 6.18.*unaffected7.1.4 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/222c4c52c3af2d0f68de31182710df3508a31095 ↗
- https://git.kernel.org/stable/c/2ad5509dd576ae16d252d4698daf03002f9e0234 ↗
- https://git.kernel.org/stable/c/a8f5d39971bbad9340d49cd41b0e2da9452a649d ↗
- https://git.kernel.org/stable/c/2b4592cea214683de0f2ce6f8c22c097fb0ea1ab ↗
- https://git.kernel.org/stable/c/52a56cf53ec834c44ac1b4d16d585f26613ee5ce ↗
- https://git.kernel.org/stable/c/baa5e094886fffa7e6272edcb5e08be5ce28262c ↗