diff options
| author |   Asim Viladi Oglu Manizada <manizada@pm.me> | 2026-05-16 21:15:39 +0000 |
|---|---|---|
| committer |   Steve French <stfrench@microsoft.com> | 2026-05-19 10:43:05 -0500 |
| commit | 3da1fdf4efbc490041eb4f836bf596201203f8f2 (patch) | |
| tree | 89ee4df06440479ec90ce10bca8ac5a7e133bd6f /include/linux/reset/ssh:/git@git.zx2c4.com | |
| parent | smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (diff) | |
smb: client: reject userspace cifs.spnego descriptions
cifs.spnego key descriptions contain authority-bearing fields such as
pid, uid, creduid, and upcall_target that cifs.upcall treats as
kernel-originating inputs. However, userspace can also create keys of
this type through request_key(2) or add_key(2), allowing those fields to
be supplied without CIFS origin.
Only accept cifs.spnego descriptions while CIFS is using its private
spnego_cred to request the key.
Fixes: f1d662a7d5e5 ("[CIFS] Add upcall files for cifs to use spnego/kerberos")
Assisted-by: avom-custom-harness:gpt-5.5-qwen3.6-mod-mix
Reviewed-by: David Howells <dhowells@redhat.com>
Signed-off-by: Asim Viladi Oglu Manizada <manizada@pm.me>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'include/linux/reset/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions