[SRU][Mantic][Jammy][PATCH 0/1] CVE-2024-22705

[Bethany Jamison]

[Impact]

An issue was discovered in ksmbd in the Linux kernel before 6.6.10.
smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an
smb_strndup_from_utf16 out-of-bounds access because the relationship
between Name data and CreateContexts data is mishandled.

[Fix]

Clean cherry-pick.

[Test Case]

Compile and boot test.

[Regression Potential]

Issues could occur when opening smb2.

Namjae Jeon (1):
  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()

 fs/smb/server/smb2misc.c | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

-- 
2.34.1