mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-26 00:11:04 +00:00
Code Issues Projects Releases Wiki Activity

libnfs: patch CVE-2026-57918

Browse Source 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57918

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-09-15 10:13:29 +05:30
committed by Anuj Mittal
parent 6ace2f0b5e
commit bb3f5628f1
2 changed files with 35 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-connectivity/libnfs/libnfs/CVE-2026-57918.patch
+34
View File
@@ -0,0 +1,34 @@
From 589568b88a06d92b298ecce563ae57b5fad91238 Mon Sep 17 00:00:00 2001
From: Ronnie Sahlberg <ronniesahlberg@gmail.com>
Date: Wed, 10 Jun 2026 12:21:58 +1000
Subject: [PATCH] socket: prevent an underflow in xid
if the expected pdu-size is larger than the absolute pdu size
from the xid/record-marker.
Reported-by: Nick Hummel <nickhummel@google.com>
Signed-off-by: Ronnie Sahlberg <ronniesahlberg@gmail.com>
(cherry picked from commit 935b8db712b3c6649bc57ddc276526c4a31680de)
CVE: CVE-2026-57918
Upstream-Status: Backport [https://github.com/sahlberg/libnfs/commit/935b8db712b3c6649bc57ddc276526c4a31680de]
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
lib/socket.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/lib/socket.c b/lib/socket.c
index f51ca4d..8e38eb8 100644
--- a/lib/socket.c
+++ b/lib/socket.c
@@ -929,6 +929,9 @@ rpc_read_from_socket(struct rpc_context *rpc)
break;
case READ_IOVEC:
rpc->pdu->read_count -= rpc->pdu_size;
+ if (rpc->rm_xid[0] < rpc->pdu_size) {
+ return -1;
+ }
rpc->rm_xid[0] -= rpc->pdu_size;
if (!rpc->rm_xid[0]) {
rpc_finished_pdu(rpc);
meta-oe/recipes-connectivity/libnfs/libnfs_6.0.2.bb
+1
View File
@@ -6,6 +6,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=825301ba17efc9d188ee0abd4b924ada"
SRC_URI = "git://github.com/sahlberg/libnfs.git;protocol=https;branch=master \
file://0001-CMakeLists.txt-respect-CMAKE_INSTALL_LIBDIR-for-mult.patch \
file://CVE-2026-53689.patch \
file://CVE-2026-57918.patch \
"
SRCREV = "18c5c73ee88bb7dc8da0d55dc95164bb77e49dc6"