From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pf1-f180.google.com (mail-pf1-f180.google.com [209.85.210.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 98669314D10 for ; Tue, 25 Nov 2025 11:06:58 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.180 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764068820; cv=none; b=gFxDaEeFXTut89gCPXQYhODYxJ7SJM3n+gFwsHuj4uzWwY0BveqZKCxmJ6P1W+egxD1La71XV98MzwJbVhkLhoSTre3i0Yu3h22a1gyZZYHkzc2ohTsrV/qeT7ltgDm2HcJCDW0a+tt4UF21vxNKPi/3SxaGNIF1ggYT6lzd0rI= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1764068820; c=relaxed/simple; bh=CF/+cp/ikK9xbmBQWUyunSBjPVUO7C3k6V5BR4Cg2zc=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=F1aQT4V/XUFrA2NDgCubAWm8tvQ8wgcWALYxXKneL5iRY2857DK99+Efg1InJEnSQRTBrSwzuLjc0AkYokll7KaMqSbra+Uukkrsg8beJqtLgK6hxk7oX9xDrri2e6jx5ZQcDY2n5Z69184XR29+4T84eRNk5f6WFbnTA+cPoYM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=mJyLHeNe; arc=none smtp.client-ip=209.85.210.180 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="mJyLHeNe" Received: by mail-pf1-f180.google.com with SMTP id d2e1a72fcca58-7b89c1ce9easo6310989b3a.2 for ; Tue, 25 Nov 2025 03:06:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1764068818; x=1764673618; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=oSf+9B1YY5bbzpHCAcCtwWmXAcZn/8Kv4GdW54o/Uj0=; b=mJyLHeNe73ziOdeu+EpNqCYSCvTkJKiQoTQOmyOgefDxlqZl0B6CQglX/9vjG2DVkC hXdJRabbLpIKMWd7jz0ETUbrINtNIDcRRUwC62FaHQIcIPGJSX66fRe87SJJSrBqEVJz d1NvxX4Y21pLVqjo+d2Vwc1dyZaOB2ry5oH83+qydtQ1/XCb/sNH0g5n5qafPS3Q80rg 04X7Gd4aavw4b2pLNw4MMCbRF9eDOccNuifXjHa9AQ1HGnOMT428RA0Ws19ems9/uYOV 3lrAdSWoorpZKW+DZWbbp4vmHsJ5BVv9Unl5pBH3Nfy6en5sIAl5uLiFG/6Wj46aB51l Awsw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764068818; x=1764673618; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=oSf+9B1YY5bbzpHCAcCtwWmXAcZn/8Kv4GdW54o/Uj0=; b=elOfgV3dwzclyTDvT+eZ7NYwnKaDp/hHghGXeUtDU1BB8XpT+jexFAfI2dXyHgJwaA MzPvxVIij/PR8L5UQfLZlNBvXfqPuBvOMsXj25Ih6PI/KNvlhL3cwPBlH2mGnzThy84+ PX4jUffeB+kyOfya40d1XAhXakalX/4tzjT8OWICGDOJ7Nl2zPQp7MDugQK6hijeIPcP xY400c3Gfsnvs2as7v+N0zCr4jqL34Mxb/hi0VvJECrgdPC0FMkepyfAFqMIWJ//dt64 iK/kZIQ+nFx7l50nrI+huBVsBea0JeYmSK/xUd6Pm0m5JCGiojIzcjsPGn98o84XihK8 nDDQ== X-Forwarded-Encrypted: i=1; AJvYcCUahYtrsdcK6NrvUOPNe2tP1GPDBb+63eOkfIMY1X2ohwjZmxLrhZv0qk8UqNn8E3jIYbWkTdokJVbjf1o=@vger.kernel.org X-Gm-Message-State: AOJu0YwnzBrLmXuddYgTaxKiCL5hbmdoBOEfzSRs9m69fTowqIznVRuR qbnj3FYBJ11AkKjR4t0DldIA7iT+W2T2JcyUxwtEEp1bzMcRrwKBAPE/ X-Gm-Gg: ASbGncvLdEBj8SZ7CTfbByWVjuM1J/cdLwRhwvmxJl5JWnF/og7Znr0B7W6e+c5Bp3h SICZtWmQ5layk5gtlPggnvqfUL/yYOjug09uza4yLS0T4pll2bP/Qn246kP30mQoYBdxZ5Ge4HI X/CFCLdL7TiiZxK01HxRV1lM1OiRmH/qMcFO/Na0lOSjLKpfODMSYYDCH45DRoySjH3kqniGApW C6WHWN0DpboJHZUO4JJ0VL7ig/tQ9z+ZfDSTPNxZxj6WiKa3RZmnPmAgugAwRXpDgQtgXP8gDQI +/fNgn2jwf44e8hVJwN+la2Bi1QsbZ6VdiBLIXJjJZfurkMY5EozWqUMu75hP6LVRMBqS8jRK3b ZA91xrqhK6cHEHRnrR+rmozI7NK+99KxY6NGq8DaYX0miMY+oNPB7WvPwIrW35u06jo8Y2cxFev D7UA8Mrag= X-Google-Smtp-Source: AGHT+IFYFfHVKZQzwb6IMPdd7OEoP5ZgSzS/dSK5OrxOSnXe5VQeuZwS6nDlCE0tZxvuqio9hdHtFg== X-Received: by 2002:a05:6a00:1399:b0:7b2:1fb0:6da3 with SMTP id d2e1a72fcca58-7c58e60111bmr15047767b3a.24.1764068817779; Tue, 25 Nov 2025 03:06:57 -0800 (PST) Received: from hsukr3.. ([2405:201:d019:4042:c1a3:cd97:974e:2371]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7c3f145845csm17743758b3a.61.2025.11.25.03.06.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 25 Nov 2025 03:06:56 -0800 (PST) From: Sukrut Heroorkar To: Jan Kara , linux-kernel@vger.kernel.org (open list) Cc: shuah@kernel.org, david.hunter.linux@gmail.com, Sukrut Heroorkar Subject: [PATCH 5.15.y 0/2] udf: backport udf_rename fixes to verify link-count Date: Tue, 25 Nov 2025 16:36:35 +0530 Message-ID: <20251125110638.15758-1-hsukrut3@gmail.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit This series backports two upstream commits needed to fix a udf_rename crash reported by syzbot. https://syzkaller.appspot.com/bug?extid=99bb36d7a3ea562b950e Patch 1: brings in the prerequisite restructuring of udf_rename from upstream commit 9d35cebb794b ("udf_rename(): only access the child content on cross-directory rename"). This commit introduces is_dir that the later fix depends upon. Patch 2: backports upstream commit 6756af923e06 ("udf: Verify inode link counts before performing rename"), which adds the link-count verifications. Both the patches apply cleanly to v5.15.y and this upstream fix is already backported to v6.12.y with commit id 0a65d850c45d and, to v6.6.y with commit id b41d73055284. A similar patch series, to backport this fix is already sent for v6.1.y The reproducer from syzbot no longer triggers issue with this series applied. The patch containing diffs, combined from both the commit was tested by syzbot and it triggers no issue. The kernel also builds & boots on a native x86_64 machine with this fix applied. Al Viro (1): udf_rename(): only access the child content on cross-directory rename Jan Kara (1): udf: Verify inode link counts before performing rename fs/udf/namei.c | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) -- 2.43.0