[SRU,Bionic/HWE-5.8,0/1] CVE-2021-38199

[Impact]

"Operators of remote NFSv4 can servers to cause a denial of service
(hanging of mounts) by arranging for those servers to be unreachable during
trunking detection."

[Backport]

There was an extra line from a different commit absent from bionic, which
required a conflict fix because of the extra line in the context.

[Test case]

No specific test case for the vulnerability was tested. However, it was
tested that an NFSv4 mount could still work on both 4.15 and 5.8 versions.

[Potential regression]

NFS mount or access could cause a hang or crash.


Trond Myklebust (1):
  NFSv4: Initialise connection to the server in nfs4_alloc_client()

 fs/nfs/nfs4client.c | 82 +++++++++++++++++++++++----------------------
 1 file changed, 42 insertions(+), 40 deletions(-)

Acked-by: Tim Gardner <tim.gardner@canonical.com>

LGTM

On 9/27/21 5:12 PM, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> 
> "Operators of remote NFSv4 can servers to cause a denial of service
> (hanging of mounts) by arranging for those servers to be unreachable during
> trunking detection."
> 
> [Backport]
> 
> There was an extra line from a different commit absent from bionic, which
> required a conflict fix because of the extra line in the context.
> 
> [Test case]
> 
> No specific test case for the vulnerability was tested. However, it was
> tested that an NFSv4 mount could still work on both 4.15 and 5.8 versions.
> 
> [Potential regression]
> 
> NFS mount or access could cause a hang or crash.
> 
> 
> Trond Myklebust (1):
>    NFSv4: Initialise connection to the server in nfs4_alloc_client()
> 
>   fs/nfs/nfs4client.c | 82 +++++++++++++++++++++++----------------------
>   1 file changed, 42 insertions(+), 40 deletions(-)
>

On 28.09.21 01:12, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> 
> "Operators of remote NFSv4 can servers to cause a denial of service
> (hanging of mounts) by arranging for those servers to be unreachable during
> trunking detection."
> 
> [Backport]
> 
> There was an extra line from a different commit absent from bionic, which
> required a conflict fix because of the extra line in the context.
> 
> [Test case]
> 
> No specific test case for the vulnerability was tested. However, it was
> tested that an NFSv4 mount could still work on both 4.15 and 5.8 versions.
> 
> [Potential regression]
> 
> NFS mount or access could cause a hang or crash.
> 
> 
> Trond Myklebust (1):
>    NFSv4: Initialise connection to the server in nfs4_alloc_client()
> 
>   fs/nfs/nfs4client.c | 82 +++++++++++++++++++++++----------------------
>   1 file changed, 42 insertions(+), 40 deletions(-)
> 
Acked-by: Stefan Bader <stefan.bader@canonical.com>

Applied to bionic master-next. Thank you!

-Kelsey

On 2021-09-27 20:12:15 , Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> 
> "Operators of remote NFSv4 can servers to cause a denial of service
> (hanging of mounts) by arranging for those servers to be unreachable during
> trunking detection."
> 
> [Backport]
> 
> There was an extra line from a different commit absent from bionic, which
> required a conflict fix because of the extra line in the context.
> 
> [Test case]
> 
> No specific test case for the vulnerability was tested. However, it was
> tested that an NFSv4 mount could still work on both 4.15 and 5.8 versions.
> 
> [Potential regression]
> 
> NFS mount or access could cause a hang or crash.
> 
> 
> Trond Myklebust (1):
>   NFSv4: Initialise connection to the server in nfs4_alloc_client()
> 
>  fs/nfs/nfs4client.c | 82 +++++++++++++++++++++++----------------------
>  1 file changed, 42 insertions(+), 40 deletions(-)
> 
> -- 
> 2.30.2
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team