Here are the two backported patches aimed at addressing a crash.
Patch 1 fix validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().
Patch 2 fix issue in patch 1.
The original patches were authored by Paulo Alcantara pc@manguebit.com. Original Patches: 1. af1689a9b770 ("smb: client: fix potential OOBs in smb2_parse_contexts()") 2. 76025cc2285d ("smb: client: fix parsing of SMB3.1.1 POSIX create context")
Please review and consider applying these patches.
fs/smb/client/cached_dir.c | 8 +++++--- fs/smb/client/smb2pdu.c | 93 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++------------------------------------- fs/smb/client/smb2proto.h | 12 +++++++----- 3 files changed, 68 insertions(+), 45 deletions(-)