Re: CVE-2025-2312 in cifs-utils

[Noah Meyerhans <noahm@debian.org>]

On Tue, Apr 22, 2025 at 07:58:56PM +0200, Salvatore Bonaccorso wrote:
> Speaking for the kernel-team: No, if we want that change in stable and
> for the 6.1.y kernel then it should be accepted upstream in the 6.1.y
> series. As alternative your employer might use backports kernel?

The kernel change was introduced with 6.13, so backports doesn't help
yet.  I'll work with my employer's kernel folkѕ on getting the kernel
change applied to the 6.x LTS branches, and will revisit this with the
cifs-utils maintainers once it's available there.

Thanks
noah