CVE-2020-10742 -- nfs client weirdness with max_rqst_size

Hi!

I did a bit of research on CVE-2020-10742.

Unfortunately, RedHat is a bad player here, and bug reports are partly hidden from public.

https://bugzilla.redhat.com/show_bug.cgi?id=1824270

https://bugzilla.redhat.com/show_bug.cgi?id=1835127

The bug does not seem especially bad (it looks like it needs specific configuration to trigger), and Salvatore Bonaccorso was not able to trigger it in 4.19.118.

Original report is for 3.10 kernels, so that makes some sense.

I don't believe we need to do anything here.

Best regards,

Pavel

(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#4669): https://lists.cip-project.org/g/cip-dev/message/4669
Mute This Topic: https://lists.cip-project.org/mt/74651769/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Hi,

SUSE reports it was introduced in v3.5 and fixed in v3.16.

See https://bugzilla.suse.com/show_bug.cgi?id=1171984 .

ChenYu

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#4709): https://lists.cip-project.org/g/cip-dev/message/4709
Mute This Topic: https://lists.cip-project.org/mt/74651769/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-