kubernetes-csi / csi-driver-smb

78%

master: 79%

LAST BUILD ON BRANCH CVE-2025-22872

branch: CVE-2025-22872

CHANGE BRANCH

x

Reset

Sync Branches

• CVE-2025-22872
• Bump-K8s-to-v0.21.0
• CVE-2018-25032
• CVE-2020-14040
• CVE-2021
• CVE-2021-38561
• CVE-2022-0778
• CVE-2022-1271
• CVE-2022-21698
• CVE-2022-41723
• CVE-2023-2431
• CVE-2023-3676
• CVE-2023-39325
• CVE-2023-45288
• CVE-2023-48795
• CVE-2024-45336
• CVE-2024-45337
• CVE-2024-45338
• CVE-2024-5321
• CVE-2025-0426
• CVE-2025-22866
• CVE-2025-22868
• CVE-2025-22871
• CVE-2025-30204
• CVE-2025-4673
• Chmod-volume-before-deletion
• EHOSTDOWN
• Fix-fsGroup-behavior
• GHSA-xr7q-jx4m-x55m
• GetVolumeStats
• PRISMA-2022-0227
• Remove-excessive-recursive-variable-expansions
• Remove-stale-archived-volume-copy-before-Rename
• RemoveStageTarget
• Use-credentials-mount-option
• achive
• add-CriticalAddonsOnly-toleration
• add-Dockerfile-dependabot
• add-artifacthub-repo
• add-containerSecurityContext
• add-dependabot
• add-env
• add-helm-chart
• add-helm-chart-verify
• add-pv-patch-permission
• add-seccompProfile
• add-support-doc
• add-test
• add-tolerance
• add-version
• add-windows-known-issue
• add_volume_cloning_doc
• adjust-helm-labels
• adjust-loglevel-csi-proxy
• append-username
• arm-build
• arm-build-issue
• arm64
• arm64-build-error
• armv7
• azure-env-vars
• baseimage-bookworm
• baserepo
• bring-sa
• build-image
• build-optimize
• bump-csidriver-to-v1
• change-test-sc
• chart-serviceAccount-fix-v1.7
• charts-fix
• ci-linter
• cleanup-gomod
• cleanup-kerberos-tickets
• cloudbuild
• codespell
• concurrent_changes
• configure
• containerd-test
• convert-name-to-ip
• copy_volume
• create-subdir-if-not-exists
• createsubdir-test
• createvol-delete-vol-full-support
• csi-node-driver-registrar-v2.6.3
• csi-provisioner-5.0.2
• csi-proxy-beta
• csi-proxy-v0.1.0-config
• csi-proxy-v0.2.0
• csi-proxy-v1
• csi-proxy-v1.0.0-config
• csi-proxy-v1.0.1
• csi-sidecar-upgrade
• csi-test-v5
• csi-v1.3.0
• csidriver
• curl
• customize-kerberos-settings
• cut-0.1.0
• cut-v0.1.0
• cut-v0.2.0
• cut-v0.3.0
• cut-v0.4.0
• cut-v0.5.0
• cut-v0.6.0
• cut-v1.1.0
• cut-v1.10.0
• cut-v1.11.0
• cut-v1.12.0
• cut-v1.13.0
• cut-v1.14.0
• cut-v1.15.0
• cut-v1.15.0-2
• cut-v1.16.0
• cut-v1.17.0
• cut-v1.18.0
• cut-v1.2.0
• cut-v1.3.0
• cut-v1.4.0
• cut-v1.5.0
• cut-v1.6.0
• cut-v1.7.0
• cut-v1.8.0
• cut-v1.9.0
• cve
• daemonset-ephemeral
• debian-base
• debian-update
• delete-pod-test
• dependabot/docker/cmd/smbplugin/build-image/debian-base-bookworm-v1.0.1
• dependabot/docker/cmd/smbplugin/build-image/debian-base-bookworm-v1.0.2
• dependabot/docker/cmd/smbplugin/build-image/debian-base-bookworm-v1.0.3
• dependabot/docker/cmd/smbplugin/build-image/debian-base-bookworm-v1.0.4
• dependabot/docker/cmd/smbplugin/build-image/debian-base-bookworm-v1.0.5
• dependabot/docker/cmd/smbplugin/build-image/debian-base-bookworm-v1.0.6
• dependabot/github_actions/actions/checkout-3
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/setup-go-4
• dependabot/github_actions/actions/setup-go-5
• dependabot/github_actions/actions/setup-go-6
• dependabot/github_actions/github/codeql-action-2
• dependabot/github_actions/github/codeql-action-3
• dependabot/github_actions/golangci/golangci-lint-action-4
• dependabot/github_actions/golangci/golangci-lint-action-5
• dependabot/github_actions/golangci/golangci-lint-action-6
• dependabot/github_actions/golangci/golangci-lint-action-7
• dependabot/github_actions/golangci/golangci-lint-action-8
• dependabot/go_modules/github.com/Azure/azure-sdk-for-go-68.0.0incompatible
• dependabot/go_modules/github.com/Azure/go-autorest/autorest-0.11.29
• dependabot/go_modules/github.com/container-storage-interface/spec-1.8.0
• dependabot/go_modules/github.com/golang/protobuf-1.5.3
• dependabot/go_modules/github.com/golang/protobuf-1.5.4
• dependabot/go_modules/github.com/kubernetes-csi/csi-lib-utils-0.13.0
• dependabot/go_modules/github.com/pborman/uuid-1.2.1
• dependabot/go_modules/github.com/stretchr/testify-1.8.2
• dependabot/go_modules/golang.org/x/net-0.10.0
• dependabot/go_modules/google.golang.org/grpc-1.57.0
• dependabot/go_modules/k8s.io/apimachinery-0.28.5
• dependabot/go_modules/k8s.io/apimachinery-0.28.6
• dependabot/go_modules/k8s.io/apimachinery-0.29.0
• dependabot/go_modules/k8s.io/apimachinery-0.31.3
• dependabot/go_modules/k8s.io/client-go-0.28.6
• dependabot/go_modules/k8s.io/client-go-0.28.8
• dependabot/go_modules/k8s.io/client-go-0.29.0
• dependabot/go_modules/k8s.io/client-go-0.31.3
• dependabot/go_modules/k8s.io/component-base-0.28.6
• dependabot/go_modules/k8s.io/component-base-0.29.0
• dependabot/go_modules/k8s.io/component-base-0.31.3
• dependabot/go_modules/k8s.io/klog/v2-2.130.1
• dependabot/go_modules/k8s.io/mount-utils-0.29.1
• dependabot/go_modules/k8s.io/mount-utils-0.29.2
• dependabot/go_modules/k8s.io/mount-utils-0.29.3
• dependabot/go_modules/k8s.io/mount-utils-0.31.3
• dependabot/go_modules/k8s.io/pod-security-admission-0.28.5
• dependabot/go_modules/k8s.io/pod-security-admission-0.28.6
• dependabot/go_modules/k8s.io/pod-security-admission-0.28.7
• dependabot/go_modules/k8s.io/pod-security-admission-0.28.8
• deprecated-csidriver
• disable-get-volume-stats
• dnspolicy
• dnspolicy-fix
• dnspolicy2
• doc
• docker-buildx
• docs-updates
• domain-fix
• domain-issue
• drivername
• drivername-issue
• dynamic-provisioning
• e2e
• e2e-fix
• e2e-install-provisioner
• e2e-restart-driver-test
• e2e-test-manifest
• e2e-test-subpath
• e2e-tests
• enable-GetVolumeStats
• enable-action-all-branches
• enable-hpc-by-default
• enable-more-sanity-tests
• enable-one-external-test
• enable-sanity-test
• enable-subpath-test
• ensureMountPoint
• example-windows
• expand-vol
• extensiveMountPointCheck
• external-1.22
• external-1.24.0
• external-e2e-tests
• external-stress-test
• external-tests-1.21
• feature/ref-counts
• fix-2022-test-failure
• fix-CVE-2021-3996
• fix-CVE-2025-47907-failure
• fix-CVEs
• fix-TestLogGRPC-failure
• fix-affinity-chart
• fix-archive-subdir
• fix-arm64-container-build
• fix-broken
• fix-broken-pipeline
• fix-broken-pipeline-1.4
• fix-broken-pipeline-1.5
• fix-broken-pipeline-1.6
• fix-buildkit
• fix-buildkit-arm64
• fix-buildx
• fix-canary-build
• fix-capz-test-failure
• fix-chart
• fix-chart-index
• fix-ci-linter
• fix-cloud-build
• fix-cloudbuild
• fix-csi-win-defaults
• fix-delete-error-archived
• fix-delete-volume-permission
• fix-deployment
• fix-display-driver-name
• fix-dup-securityContext
• fix-e2e-test
• fix-external-test-failure
• fix-gid-conflict-issue
• fix-gke-auth
• fix-go-mod
• fix-golint-error
• fix-golint-error2
• fix-golinter
• fix-goroutine-leak
• fix-goveralls
• fix-helm-install
• fix-helm-lint
• fix-hpc-test-failure
• fix-image-push
• fix-index
• fix-install
• fix-integration-fails
• fix-kerberos-auth-doc
• fix-kerberos-path
• fix-krb5-tkt-access
• fix-kubelet-path
• fix-node-kerberos-cache-volume-name
• fix-password
• fix-push-manifest
• fix-pv-annotations
• fix-readonly-doc
• fix-runOnControlPlane
• fix-runOnMaster
• fix-runOnMaster2
• fix-samba-test
• fix-sanity-test
• fix-sdlib
• fix-smb-IsCorruptedMnt
• fix-spelling
• fix-static-checks
• fix-test-error
• fix-text-lib
• fix-tmp-mount-permission
• fix-tmp-path-mount-issue
• fix-tmp-path-mount-issue2
• fix-trivy2
• fix-v1.4.0-chart
• fix-v1.7-image
• fix-var-lib-kubelet-direct-usage
• fix-var-lib-kubelet-direct-usage-1.14
• fix-vol-cap
• fix-win-2019-test-failure
• fix-win-e2e-test
• fix-win-gh-action
• fix-win-test-failure
• fix-win-test-failure2
• fix-win1809-build-failure
• fix-windows
• fix-windows-build-1.15
• fix-windows-build-1.16
• fix-windows-pipeline
• fix/490-node-affinity
• fix/node-sa-values
• fix/smb-cleanup
• forbid-block-volume-cap
• force-umount
• fsgroup
• gcr-canary
• gcr-repo
• go-1.18
• go-guild-1.22.5
• go1.22
• go1.24
• golint-check
• guest-create-subdir
• guest-login
• helm-chart-index-verify
• helm-configure-kubelet-path
• helm-patch
• helm-secret
• hotfix
• hotfix/kubelet-path
• hotfix/mem-limits
• hpc
• hpc2
• http-endpoint
• http-endpoint-v1.14.0-fix
• image_repository
• increase-cpu-limits
• increase-driver-cpu-limit
• increase-memory-limit
• increase-retry-interval-max
• inline-volume
• int-test
• issue-182
• issue-242
• issue-553-driver-daemonset-restart-multiple-times-on-windows-node-0
• issues-221
• k8s-1.23
• kerberos-dir-fix
• klog-2.0.4
• klog-v2
• kubelet-chart
• kubelet-path-fix
• kubeletPath-fix-v0.6.0
• libgmp10
• libssl-upgrade
• list-account-test
• liveness-linux
• liveness-probe-port
• livenessprobe-upgrade
• log-grpc
• logging
• loggingMountOptions
• loglevel
• lstat
• macos-support
• main-test
• make-continer
• makefile
• makefile2
• master
• maxUnavailable
• mayank/arm-build
• mayank/dockerfile
• mayank/fix-chart
• mayank/fix-windows-tests
• mayank/reenable-node-tests
• mayank/windows-test
• mengzezhu/upgrade-golint-version
• metrics-logging
• mkdirall
• mount-utils
• mount-utils-enodev
• mount-windows-logging
• mount-with-0777
• mountoptions-deletevolume
• muliti-pods-e2e-test
• multi-os-versions
• noProvisionerSecret-test
• node-driver-registrar
• node-registrar-sock
• node-registrar-v2.3
• node-security-context
• node-serviceAccount
• nonroot
• patch-1
• patch-2
• pluto
• poll-immediate
• port-num-change
• ppc64le
• private/removeStatic
• pv-smb-doc
• read-only-e2e-test
• reclaim-policy-e2e-test
• reduce-logs
• reduce-mount-lock
• reduce-quota
• refactor-verify-examples-test
• refine-ProxyMounter
• refine-delete-subdir-check
• refine-doc
• refine-sanity-test-script
• refine-travis
• refine-windows-image-build
• refs/tags/v1.0.0
• refs/tags/v1.10.0
• refs/tags/v1.11.0
• refs/tags/v1.12.0
• refs/tags/v1.13.0
• refs/tags/v1.14.0
• refs/tags/v1.15.0
• refs/tags/v1.16.0
• refs/tags/v1.17.0
• refs/tags/v1.18.0
• refs/tags/v1.3.0
• refs/tags/v1.4.0
• refs/tags/v1.5.0
• refs/tags/v1.6.0
• refs/tags/v1.7.0
• refs/tags/v1.8.0
• refs/tags/v1.9.0
• registry.k8s.io
• release-1.10
• release-1.15
• release-1.16
• release-1.4
• release-1.5
• release-1.6
• release-tool
• release-tools
• release-v1.10
• remove-1.15-chart
• remove-1903
• remove-20H2
• remove-arm64-workaround
• remove-armv7-support
• remove-buildkit-workaround
• remove-cpu-limits2
• remove-createsubdir
• remove-deprecated-test-configs
• remove-force-umount
• remove-klogv1
• remove-livenessProbe
• remove-lock
• remove-logging
• remove-node-metrics-address
• remove-node-metricsPort
• remove-parent-dir
• remove-qemu-workaround
• remove-quotes
• remove-travis
• remove-unused-code
• remove-windows-image-chart
• remove-windows-memory-requests
• removeSMBMappingDuringUnmount-switch
• replace-deprecated-ioutil
• replica-one
• restart-broken
• retornam/edits
• retornam/updategolang
• revert-1.14.0-chart-change
• revert-124-nonroot
• revert-906-fix-password
• revert-sidecar-images
• revert-win-http-endpoint
• runOnControlPlane
• samba-image
• sanity-test-v4.0.2
• sanity-test-v4.3
• security-context
• selinux
• sensitive-mount
• set-smb-server
• setup-integration-testing-g-workflow
• show-drivername
• sidecar-cpu-limit
• sidecar-upgrade
• sidecar-ws2022
• skip-win-test
• slow-tests
• smb-csi
• smb-provisioner-doc
• smb-server-doc
• smb-unmount
• statfs-cache
• static-pv-doc
• storage-class-support
• subdir
• subdir-pvc-metadata
• support-kerberos-ticket
• support-win-hpc-image-build
• support_ws2022
• switch-go-1.15
• switch-master-1.1.0
• switch-master-1.10.0
• switch-master-1.2.0
• switch-master-1.3.0
• switch-master-1.4.0
• switch-master-1.5.0
• switch-master-1.6.0
• switch-master-1.7.0
• switch-master-1.8.0
• switch-master-1.9.0
• switch-mcr-image
• test
• test-specific-image-1.16
• test-win-failure
• test_helm_repo
• tolerations
• trivy-goversion
• unit-tests
• unmount-stuck
• update-base-image
• update-bugreport-md
• update-csi-proxy-install
• update-csi-release-tools
• update-csi-release-tools5
• update-debian-image
• update-dependabot
• update-doc
• update-master-chart-version
• update-path
• update-release-tools3
• update-release-tools5
• update-release-tools6
• update-vendor
• update_livenessprobe_version
• update_release-tools2
• update_release-tools4
• upgrade-1.26.0
• upgrade-base-image
• upgrade-base-image2
• upgrade-csi-provisioner-v3.1.0
• upgrade-csi-provisioner-v5.0.2
• upgrade-csi-sidecar-images
• upgrade-csi-spec
• upgrade-csi-test-5.3.1
• upgrade-go-autorest
• upgrade-golang-xnet
• upgrade-golint-version
• upgrade-golint-version2
• upgrade-k8s-1.28.4
• upgrade-k8s-dependency
• upgrade-k8s-lib
• upgrade-mount-utils
• upgrade-node-driver-registrar
• upgrade-provisioner-version
• upgrade-release-tools
• upgrade-resizer
• upgrade-resizer-1.14.0
• upgrade-sidecar-images
• upgrade-sidecar-images2
• upgrade-sidecar-images3
• upgrade-sidecar-images4
• upgrade-sidecar-images5
• upgrade-sidecar-images6
• upgrade-sidecar-versions
• upgrade-sidecar-versions2
• upgrade-sidecar-versions3
• upgrade-sidecar-versions4
• upgrade-to-v1
• upgrade_golangci_1.54
• use-canary-windows-hp
• use-context-package
• use-mcr-image
• use-onetag-e2e-test
• use-servercore-cache
• use-winsymlink
• use_util_wait_func
• verify-examples
• verify-gomod
• verify-helm-chart-files
• verify-helm-chart2
• win-2022
• win-build-pipeline
• win-containerd-latest-tag
• win-pod-crash
• win-ut
• windows-convert-source-path
• windows-fix
• windows-hostpat-type
• windows-mountoptions
• windows-name-resolution-docs
• windows-test
• windows-ut-pipeline
• workflow-test-fix
• workingMountDir

Build # 14545396150

Build Type

Pull #944

github

Committed by andyzhangx

Commit Message

fix: CVE-2025-22872

Pull Request Pull Request #944: fix: CVE-2025-22872

Run Details

1107 of 1411 relevant lines covered (78.45%)

5.15 hits per line