Greg Banks 48f51fc263 [PATCH] Fix a free-wrong-pointer bug in nfs/acl server (CVE-2007-0772) ...

Due to type confusion, when an nfsacl verison 2 'ACCESS' request
finishes and tries to clean up, it calls fh_put on entiredly the
wrong thing and this can cause an oops.

Signed-off-by: Neil Brown <neilb@suse.de>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2007-02-19 22:35:51 -08:00

..

9p

[PATCH] 9p: fix fid behavior on failed remove

2006-07-31 13:28:44 -07:00

adfs

[PATCH] adfs error message fix

2006-08-14 12:54:28 -07:00

affs

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

afs

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

autofs

[PATCH] VFS: Permit filesystem to override root dentry on mount

2006-06-23 07:42:45 -07:00

autofs4

[PATCH] fs: use list_move()

2006-06-26 09:58:18 -07:00

befs

[PATCH] Fix BeFS slab corruption

2006-08-06 08:57:48 -07:00

bfs

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

cifs

[PATCH] CIFS: New POSIX locking code not setting rc properly to zero on successful

2006-11-18 19:28:05 -08:00

coda

[PATCH] Remove incorrect unlock_kernel from allocation failure path in coda_open()

2006-07-31 13:28:41 -07:00

configfs

configfs: Clear up a few extra spaces where there should be TABs.

2006-06-29 14:43:01 -07:00

cramfs

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

debugfs

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

devpts

[PATCH] VFS: Permit filesystem to override root dentry on mount

2006-06-23 07:42:45 -07:00

efs

[PATCH] efs: Remove incorrect unlock_kernel from failure path in efs_symlink_readpage()

2006-07-31 13:28:41 -07:00

exportfs

…

ext2

[PATCH] EXT2: Remove superblock lock contention in ext2_statfs

2006-09-19 07:59:59 -07:00

ext3

[PATCH] ext3 sequential read regression fix

2006-09-16 12:54:32 -07:00

fat

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

freevxfs

[PATCH] freevxfs: Add missing lock_kernel() to vxfs_readdir

2006-07-31 13:28:44 -07:00

fuse

[PATCH] fuse: fix Oops in lookup

2006-12-01 16:12:37 -08:00

hfs

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

hfsplus

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

hostfs

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

hpfs

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

hppfs

[PATCH] VFS: Permit filesystem to perform statfs with a known root dentry

2006-06-23 07:42:45 -07:00

hugetlbfs

[PATCH] mmap zero-length hugetlb file with PROT_NONE to protect a hugetlb virtual area

2006-07-10 13:24:21 -07:00

isofs

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

jbd

jbd: fix commit of ordered data buffers

2006-10-13 13:23:22 -07:00

jffs

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

jffs2

[PATCH] JFFS2: SUMMARY: fix a summary collecting bug

2006-09-16 12:54:32 -07:00

jfs

[PATCH] JFS: pageno needs to be long

2006-11-03 17:33:46 -08:00

lockd

LOCKD: Fix a deadlock in nlm_traverse_files()

2006-08-24 15:51:00 -04:00

minix

[PATCH] Fix for minix crash

2006-08-27 11:01:30 -07:00

msdos

[PATCH] VFS: Permit filesystem to override root dentry on mount

2006-06-23 07:42:45 -07:00

ncpfs

Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial

2006-06-30 15:39:30 -07:00

nfs

[PATCH] NFS: nfs_lookup - don't hash dentry when optimising away the lookup

2006-11-03 17:33:49 -08:00

nfs_common

…

nfsd

[PATCH] Fix a free-wrong-pointer bug in nfs/acl server (CVE-2007-0772)

2007-02-19 22:35:51 -08:00

nls

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

ntfs

[PATCH] lockdep: annotate NTFS locking rules

2006-07-03 15:27:08 -07:00

ocfs2

ocfs2: allocation hints

2006-08-07 11:07:01 -07:00

openpromfs

[OPENPROMFS]: Rewrite using in-kernel device tree and seq_file.

2006-06-25 23:19:14 -07:00

partitions

[DISKLABEL] SUN: Fix signed int usage for sector count

2006-08-26 17:55:55 -07:00

proc

[PATCH] /proc/meminfo: don't put spaces in names

2006-08-27 11:01:33 -07:00

qnx4

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

ramfs

[PATCH] NOMMU: Fix execution off of ramfs with mmap()

2006-07-10 13:24:21 -07:00

reiserfs

[PATCH] lockdep: annotate reiserfs

2006-08-27 11:01:32 -07:00

romfs

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

smbfs

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

sysfs

sysfs: remove duplicated dput in sysfs_update_file

2006-10-13 13:23:25 -07:00

sysv

[PATCH] mark address_space_operations const

2006-06-28 14:59:04 -07:00

udf

Fix possible UDF deadlock and memory corruption (CVE-2006-4145)

2006-08-22 12:52:23 -07:00

ufs

[PATCH] ufs: truncate correction

2006-08-27 11:01:31 -07:00

vfat

[PATCH] VFS: Permit filesystem to override root dentry on mount

2006-06-23 07:42:45 -07:00

xfs

[XFS] Fix a bad pointer dereference in the quota statvfs handling.

2006-09-07 14:27:23 +10:00

aio.c

spelling fixes

2006-06-26 18:35:02 +02:00

attr.c

…

bad_inode.c

…

binfmt_aout.c

…

binfmt_elf_fdpic.c

[PATCH] FDPIC: Add coredump capability for the ELF-FDPIC binfmt

2006-07-10 13:24:22 -07:00

binfmt_elf.c

[PATCH] FDPIC: Move roundup() into linux/kernel.h

2006-07-10 13:24:22 -07:00

binfmt_em86.c

…

binfmt_flat.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

binfmt_misc.c

Merge branch 'master' of /home/trondmy/kernel/linux-2.6/

2006-06-24 13:07:53 -04:00

binfmt_script.c

…

binfmt_som.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

bio.c

…

block_dev.c

[PATCH] lockdep: fix blkdev_open() warning

2006-08-27 11:01:29 -07:00

buffer.c

mm: bug in set_page_dirty_buffers

2006-10-13 13:23:27 -07:00

char_dev.c

[PATCH] add function documentation for register_chrdev()

2006-07-14 21:53:54 -07:00

compat_ioctl.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

compat.c

[PATCH] skip data conversion in compat_sys_mount when data_page is NULL

2006-12-16 16:20:48 -08:00

dcache.c

[PATCH] lockdep: annotate dcache

2006-07-03 15:27:06 -07:00

dcookies.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

direct-io.c

[PATCH] lockdep: annotate direct io

2006-07-03 15:27:06 -07:00

dnotify.c

…

dquot.c

[PATCH] use list_add_tail() instead of list_add()

2006-06-26 09:58:17 -07:00

drop_caches.c

…

eventpoll.c

[PATCH] eventpoll.c compile fix

2006-08-27 11:01:31 -07:00

exec.c

[PATCH] fix up lockdep trace in fs/exec.c

2006-08-27 11:01:32 -07:00

fcntl.c

…

fifo.c

…

file_table.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

file.c

[PATCH] alloc_fdtable() expansion fix

2006-07-12 12:52:55 -07:00

filesystems.c

…

fs-writeback.c

[PATCH] zoned vm counters: conversion of nr_unstable to per zone counter

2006-06-30 11:25:36 -07:00

inode.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial

2006-06-30 15:39:30 -07:00

inotify_user.c

[PATCH] inotify: fix deadlock found by lockdep

2006-07-31 13:28:41 -07:00

inotify.c

…

ioctl.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

ioprio.c

[PATCH] uninline ioprio_best()

2006-08-21 10:02:50 +02:00

Kconfig

Merge git://git.kernel.org/pub/scm/linux/kernel/git/sfrench/cifs-2.6

2006-07-13 16:38:58 -07:00

Kconfig.binfmt

…

libfs.c

[PATCH] core: use list_move()

2006-06-26 09:58:17 -07:00

locks.c

[PATCH] fcntl(F_SETSIG) fix

2006-08-14 13:10:59 -07:00

Makefile

[PATCH] devfs: Remove devfs from the kernel tree

2006-06-26 12:25:05 -07:00

mbcache.c

…

mpage.c

[PATCH] writeback: fix range handling

2006-06-23 07:42:49 -07:00

namei.c

VFS: Fix access("file", X_OK) in the presence of ACLs

2006-08-24 15:54:58 -04:00

namespace.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

nfsctl.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

open.c

[PATCH] ftruncate does not always update m/ctime

2006-06-25 10:01:15 -07:00

pipe.c

[PATCH] VFS: Permit filesystem to override root dentry on mount

2006-06-23 07:42:45 -07:00

pnode.c

[PATCH] core: use list_move()

2006-06-26 09:58:17 -07:00

pnode.h

…

posix_acl.c

…

quota_v1.c

…

quota_v2.c

…

quota.c

…

read_write.c

[PATCH] fs/read_write.c: EXPORT_UNUSED_SYMBOL

2006-07-10 13:24:18 -07:00

readdir.c

…

select.c

[PATCH] fs: sys_poll with timeout -1 bug fix

2006-06-25 10:01:22 -07:00

seq_file.c

…

splice.c

[PATCH] splice: fix pipe_to_file() ->prepare_write() error path

2006-11-03 17:33:44 -08:00

stat.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

super.c

[PATCH] add missing desctiption in super.c

2006-09-06 11:00:01 -07:00

sync.c

[PATCH] writeback: fix range handling

2006-06-23 07:42:49 -07:00

xattr_acl.c

…

xattr.c

…