Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: call cache_put if xdr_reserve_space returns NULL If not enough buffer space available, but idmap_lookup has triggered lookup_fn which calls cache_get and returns successfully. Then we missed to call cache_put here which pairs with cache_get. Reviwed-by: Jeff Layton <jlayton@kernel.org>
Product status
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before 3e8081ebff12bec1347deaceb6bce0765cce54df
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before c6b16e700cf4d959af524bd9d3978407ff7ce462
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before 9f03f0016ff797932551881c7e06ae50e9c39134
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before 9803ab882d565a8fb2dde5999d98866d1c499dfd
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before 81821617312988096f5deccf0f7da6f888e98056
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before a1afbbb5276f943ad7173d0b4c626b8c75a260da
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before e32ee6a61041925d1a05c14d10352dcfce9ef029
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before 8d0765f86135e27f0bb5c950c136495719b4c834
ddd1ea56367202f6c99135cd59de7a97af4c4ffd (git) before d078cbf5c38de83bc31f83c47dcd2184c04a50c7
3.16
Any version before 3.16
4.19.323 (semver)
5.4.285 (semver)
5.10.227 (semver)
5.15.168 (semver)
6.1.113 (semver)
6.6.54 (semver)
6.10.13 (semver)
6.11.2 (semver)
6.12 (original_commit_for_fix)
References
git.kernel.org/...c/3e8081ebff12bec1347deaceb6bce0765cce54df
git.kernel.org/...c/c6b16e700cf4d959af524bd9d3978407ff7ce462
git.kernel.org/...c/9f03f0016ff797932551881c7e06ae50e9c39134
git.kernel.org/...c/9803ab882d565a8fb2dde5999d98866d1c499dfd
git.kernel.org/...c/81821617312988096f5deccf0f7da6f888e98056
git.kernel.org/...c/a1afbbb5276f943ad7173d0b4c626b8c75a260da
git.kernel.org/...c/e32ee6a61041925d1a05c14d10352dcfce9ef029
git.kernel.org/...c/8d0765f86135e27f0bb5c950c136495719b4c834
git.kernel.org/...c/d078cbf5c38de83bc31f83c47dcd2184c04a50c7