From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D2594238C3B for ; Sat, 17 Jan 2026 15:47:17 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768664837; cv=none; b=Iby2U6Zugq/dEsajaZdwZmO/7R7lSpMotRux+D471CySfsvZXP6rX5DRAFEd7mM7YfGCFAIMde8B5+j8oC1Hdwj8wnCnf3ZKXQgsGZZObfi4pnuJH7IN39fbiheQyNHn5DZUChNOyCWm9HEUTXg5WdYZPYX4RboJdRn44nn30YY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768664837; c=relaxed/simple; bh=BgHFUjAFRbhZG6/YewMFPBlxmVNwN69CTq7I22tuOG4=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=HWCKfJ4Uie8ZJnfO3rP7pcFZEYrlJoPmzeEcVClQE6B9ez1OEi+W9l8Udv8jO4kXCy4dgmPSjeZYEqAxQu2ib5Vi+4fgZxnDVx5f/XvlmqvQFz6AgupmlHyW4eqY+gzj1tG+VUmnVGcwgSrnInjoT1tF4+YqctJHdC/n4F6VCQE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=LfN7lbD/; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="LfN7lbD/" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 1C5DCC4CEF7; Sat, 17 Jan 2026 15:47:16 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1768664837; bh=BgHFUjAFRbhZG6/YewMFPBlxmVNwN69CTq7I22tuOG4=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=LfN7lbD/D9pKAPlvbgWPl5+ei3oTzg2waKBA7dKOPamg3bcSoexAbRaxAg91b40tN FmwWHmcM2IrMOeGNPAp5L4b9GCG1rDfIANhhSFSquotCY01YyWTNKo3tKMazKhinks vnur6DMX8r5Nj1SnV6/n7Am3Cb6gAzfLJxaSpvPY= Date: Sat, 17 Jan 2026 16:47:14 +0100 From: Greg KH To: Harshit Mogalapalli Cc: cve@kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH vulns] CVE-2025-68212: Add vulnerable commit information Message-ID: <2026011706-antirust-niece-8228@gregkh> References: <20260117153426.2763004-1-harshit.m.mogalapalli@oracle.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260117153426.2763004-1-harshit.m.mogalapalli@oracle.com> On Sat, Jan 17, 2026 at 03:34:26PM +0000, Harshit Mogalapalli wrote: > For the CVE fix, the actual broken commit which is more appropriate > is 37c4a9590e1e introduces the STATMOUNT_MNT_{U,G}IDMAP cases but only > writes sm->mnt_* = start while leaving offp unset. > > Hence, the broken commit for this CVE is commit: 37c4a9590e1e > ("statmount: allow to retrieve idmappings") > > Signed-off-by: Harshit Mogalapalli > --- > cve/published/2025/CVE-2025-68212.vulnerable | 1 + > 1 file changed, 1 insertion(+) > create mode 100644 cve/published/2025/CVE-2025-68212.vulnerable > > diff --git a/cve/published/2025/CVE-2025-68212.vulnerable b/cve/published/2025/CVE-2025-68212.vulnerable > new file mode 100644 > index 000000000000..602d5fbb79b3 > --- /dev/null > +++ b/cve/published/2025/CVE-2025-68212.vulnerable > @@ -0,0 +1 @@ > +37c4a9590e1efcae7749682239fc22a330d2d325 > -- > 2.50.1 > > Now applied and the records updated, thanks! greg k-h