From: Steve French <smfrench@gmail.com>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: LKML <linux-kernel@vger.kernel.org>, CIFS <linux-cifs@vger.kernel.org>
Subject: [GIT PULL] ksmbd server fixes
Date: Thu, 23 Apr 2026 17:50:21 -0500 [thread overview]
Message-ID: <CAH2r5mspnU4XxcU9Vr98PeY1iMVag9QpxdB72GO5t4EExbKkRQ@mail.gmail.com> (raw)
Please pull the following changes since commit
0b2f2b1fc0c61e602a6babf580b91f895b0ea80a:
Merge tag 'v7.1-rc1-part2-smb3-client-fixes' of
git://git.samba.org/sfrench/cifs-2.6 (2026-04-16 19:14:55 -0700)
are available in the Git repository at:
git://git.samba.org/ksmbd.git tags/v7.1-rc-part2-ksmbd-fixes
for you to fetch changes up to 1249c01aa42160e40bc765ba5a3cde751491ff0a:
smb: smbdirect: move fs/smb/common/smbdirect/ to fs/smb/smbdirect/
(2026-04-22 19:00:41 -0500)
----------------------------------------------------------------
18 ksmbd server fixes
- move fs/smb/common/smbdirect to fs/smb/smbdirect
- change signature calc to use AES-CMAC library, simpler and faster
- invalid signature fix
- multichannel fix
- open create options fix
- fix durable handle leak
- cap maximum lock count to avoid potential denial of service
- four connection fixes: connection free and session destroy IDA
fixes, refcount fix, connection leak fix, max_connections off by one
fix
- IPC validation fix
- fix out of bounds write in getting xattrs
- fix use after free in durable handle reconnect
- three ACL fixes: fix potential ACL overflow, harden num_aces check,
and fix minimum ACE size check
----------------------------------------------------------------
Akif (1):
ksmbd: fix use-after-free in smb2_open during durable reconnect
Akif Sait (1):
ksmbd: fix O(N^2) DoS in smb2_lock via unbounded LockCount
DaeMyung Kang (6):
smb: server: fix max_connections off-by-one in tcp accept path
ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id()
ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
ksmbd: destroy async_ida in ksmbd_conn_free()
ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open
ksmbd: fix CreateOptions sanitization clobbering the whole field
Eric Biggers (1):
ksmbd: Use AES-CMAC library for SMB3 signature calculation
Hyunwoo Kim (1):
ksmbd: scope conn->binding slowpath to bound sessions only
Marios Makassikis (1):
smb: server: stop sending fake security descriptors
Michael Bommarito (4):
smb: server: fix active_num_conn leak on transport allocation failure
ksmbd: validate response sizes in ipc_validate_msg()
ksmbd: require minimum ACE size in smb_check_perm_dacl()
ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()
Stefan Metzmacher (1):
smb: smbdirect: move fs/smb/common/smbdirect/ to fs/smb/smbdirect/
Tristan Madani (2):
ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
MAINTAINERS | 2 +-
fs/smb/Kconfig | 2 +-
fs/smb/Makefile | 1 +
fs/smb/client/Kconfig | 2 +-
fs/smb/client/smbdirect.c | 2 +-
fs/smb/client/smbdirect.h | 2 +-
fs/smb/common/Makefile | 1 -
fs/smb/common/smbdirect/Makefile | 18 -------
fs/smb/server/Kconfig | 4 +-
fs/smb/server/auth.c | 51 +++++-------------
fs/smb/server/auth.h | 4 +-
fs/smb/server/connection.c | 14 +++--
fs/smb/server/crypto_ctx.c | 58 --------------------
fs/smb/server/crypto_ctx.h | 12 -----
fs/smb/server/mgmt/user_config.c | 6 ---
fs/smb/server/mgmt/user_session.c | 12 +++--
fs/smb/server/server.c | 1 -
fs/smb/server/smb2pdu.c | 53 ++++++++-----------
fs/smb/server/smbacl.c | 61 +++++++++++++++++-----
fs/smb/server/transport_ipc.c | 16 ++++--
fs/smb/server/transport_rdma.c | 2 +-
fs/smb/server/transport_rdma.h | 2 +-
fs/smb/server/transport_tcp.c | 4 +-
fs/smb/{common => }/smbdirect/Kconfig | 2 +-
fs/smb/smbdirect/Makefile | 18 +++++++
.../smbdirect_accept.c => smbdirect/accept.c} | 4 +-
.../smbdirect_connect.c => smbdirect/connect.c} | 4 +-
.../connection.c} | 2 +-
.../smbdirect_debug.c => smbdirect/debug.c} | 2 +-
.../smbdirect_devices.c => smbdirect/devices.c} | 2 +-
.../smbdirect_internal.h => smbdirect/internal.h} | 6 +--
.../smbdirect_listen.c => smbdirect/listen.c} | 2 +-
.../smbdirect_main.c => smbdirect/main.c} | 2 +-
.../smbdirect/smbdirect_mr.c => smbdirect/mr.c} | 2 +-
.../smbdirect/smbdirect_pdu.h => smbdirect/pdu.h} | 0
.../smbdirect_public.h => smbdirect/public.h} | 0
.../smbdirect/smbdirect_rw.c => smbdirect/rw.c} | 2 +-
fs/smb/{common => }/smbdirect/smbdirect.h | 0
.../smbdirect_socket.c => smbdirect/socket.c} | 2 +-
.../smbdirect_socket.h => smbdirect/socket.h} | 0
40 files changed, 165 insertions(+), 215 deletions(-)
delete mode 100644 fs/smb/common/smbdirect/Makefile
rename fs/smb/{common => }/smbdirect/Kconfig (86%)
create mode 100644 fs/smb/smbdirect/Makefile
rename fs/smb/{common/smbdirect/smbdirect_accept.c => smbdirect/accept.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_connect.c =>
smbdirect/connect.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_connection.c =>
smbdirect/connection.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_debug.c => smbdirect/debug.c} (98%)
rename fs/smb/{common/smbdirect/smbdirect_devices.c =>
smbdirect/devices.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_internal.h =>
smbdirect/internal.h} (98%)
rename fs/smb/{common/smbdirect/smbdirect_listen.c => smbdirect/listen.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_main.c => smbdirect/main.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_mr.c => smbdirect/mr.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_pdu.h => smbdirect/pdu.h} (100%)
rename fs/smb/{common/smbdirect/smbdirect_public.h =>
smbdirect/public.h} (100%)
rename fs/smb/{common/smbdirect/smbdirect_rw.c => smbdirect/rw.c} (99%)
rename fs/smb/{common => }/smbdirect/smbdirect.h (100%)
rename fs/smb/{common/smbdirect/smbdirect_socket.c => smbdirect/socket.c} (99%)
rename fs/smb/{common/smbdirect/smbdirect_socket.h =>
smbdirect/socket.h} (100%)
--
Thanks,
Steve
next reply other threads:[~2026-04-23 22:50 UTC|newest]
Thread overview: 200+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-04-23 22:50 Steve French [this message]
2026-04-24 0:13 ` [GIT PULL] ksmbd server fixes pr-tracker-bot
-- strict thread matches above, loose matches on Subject: below --
2026-06-05 1:05 Steve French
2026-06-05 17:32 ` pr-tracker-bot
2026-05-30 0:00 Steve French
2026-05-30 16:16 ` pr-tracker-bot
2026-05-23 14:22 Steve French
2026-05-24 0:07 ` pr-tracker-bot
2026-05-19 14:46 Steve French
2026-05-19 16:52 ` pr-tracker-bot
2026-05-01 1:58 Steve French
2026-05-01 20:22 ` pr-tracker-bot
2026-04-14 15:11 Steve French
2026-04-16 2:53 ` pr-tracker-bot
2026-03-27 2:32 Steve French
2026-03-27 20:39 ` pr-tracker-bot
2026-03-20 4:58 Steve French
2026-03-20 16:25 ` pr-tracker-bot
2026-03-11 2:19 Steve French
2026-03-11 3:33 ` pr-tracker-bot
2026-02-26 23:12 Steve French
2026-02-27 1:56 ` pr-tracker-bot
2026-02-21 1:33 Steve French
2026-02-21 18:31 ` pr-tracker-bot
2026-01-23 17:50 Steve French
2026-01-23 22:03 ` pr-tracker-bot
2026-01-02 14:37 Steve French
2026-01-02 17:53 ` pr-tracker-bot
2025-12-26 13:37 Steve French
2025-12-26 19:50 ` pr-tracker-bot
2025-12-16 5:06 [GIT PULL[ " Steve French
2025-12-16 8:04 ` pr-tracker-bot
2025-12-12 9:05 [GIT PULL] " Steve French
2025-12-12 10:08 ` pr-tracker-bot
2025-11-13 4:39 Steve French
2025-11-13 13:04 ` pr-tracker-bot
2025-11-07 2:41 Steve French
2025-11-07 16:05 ` pr-tracker-bot
2025-10-28 23:50 Steve French
2025-10-29 1:03 ` pr-tracker-bot
2025-10-25 1:10 Steve French
2025-10-25 2:02 ` pr-tracker-bot
2025-10-16 16:52 Steve French
2025-10-16 18:06 ` pr-tracker-bot
2025-10-02 17:20 Steve French
2025-10-03 21:31 ` pr-tracker-bot
2025-09-24 2:21 Steve French
2025-09-24 19:23 ` pr-tracker-bot
2025-09-18 0:24 Steve French
2025-09-18 3:38 ` pr-tracker-bot
2025-08-21 2:02 Steve French
2025-08-21 12:01 ` pr-tracker-bot
2025-08-08 4:58 Steve French
2025-08-09 5:19 ` pr-tracker-bot
2025-07-11 13:21 Steve French
2025-07-12 18:15 ` pr-tracker-bot
2025-06-18 22:46 Steve French
2025-06-19 0:52 ` pr-tracker-bot
2025-05-23 15:23 Steve French
2025-05-23 16:51 ` pr-tracker-bot
2025-05-08 3:34 Steve French
2025-05-08 15:46 ` pr-tracker-bot
2025-04-28 23:44 Steve French
2025-04-29 0:08 ` pr-tracker-bot
2025-04-18 16:24 Steve French
2025-04-18 16:46 ` pr-tracker-bot
2025-04-03 23:13 Steve French
2025-04-03 23:24 ` pr-tracker-bot
2025-03-15 1:55 Steve French
2025-03-15 4:49 ` pr-tracker-bot
2025-01-22 23:51 Steve French
2025-01-24 1:10 ` pr-tracker-bot
2025-01-10 0:37 Steve French
2025-01-10 2:25 ` pr-tracker-bot
2024-12-18 23:40 Steve French
2024-12-19 17:03 ` pr-tracker-bot
2024-12-12 23:47 Steve French
2024-12-13 5:00 ` pr-tracker-bot
2024-12-05 16:17 Steve French
2024-12-05 23:08 ` pr-tracker-bot
2024-11-28 22:32 Steve French
2024-11-30 18:39 ` pr-tracker-bot
2024-11-08 22:29 Steve French
2024-11-08 23:25 ` pr-tracker-bot
2024-10-16 6:09 Steve French
2024-10-16 20:51 ` pr-tracker-bot
2024-10-03 16:29 Steve French
2024-10-03 16:53 ` pr-tracker-bot
2024-09-28 2:05 Steve French
2024-09-28 16:45 ` pr-tracker-bot
2024-09-17 6:23 Steve French
2024-09-19 5:20 ` pr-tracker-bot
2024-09-04 14:55 Steve French
2024-09-04 16:46 ` pr-tracker-bot
2024-08-24 13:35 Steve French
2024-08-25 0:22 ` pr-tracker-bot
2024-08-20 23:53 Steve French
2024-08-21 2:07 ` pr-tracker-bot
2024-08-13 2:57 Steve French
2024-08-13 16:17 ` pr-tracker-bot
2024-07-21 23:55 Steve French
2024-07-22 3:54 ` pr-tracker-bot
2024-07-09 14:57 Steve French
2024-07-09 15:21 ` pr-tracker-bot
2024-06-15 15:45 Steve French
2024-06-15 19:15 ` pr-tracker-bot
2024-05-25 3:16 Steve French
2024-05-25 21:32 ` pr-tracker-bot
2024-04-22 23:20 Steve French
2024-04-22 23:51 ` pr-tracker-bot
2024-04-05 3:15 Steve French
2024-04-05 17:09 ` pr-tracker-bot
2024-02-10 1:45 Steve French
2024-02-10 16:26 ` pr-tracker-bot
2024-01-27 7:20 Steve French
2024-01-27 17:21 ` pr-tracker-bot
2024-01-18 0:39 Steve French
2024-01-19 18:03 ` pr-tracker-bot
2024-01-11 14:20 Steve French
2024-01-12 5:07 ` pr-tracker-bot
2023-11-27 21:00 Steve French
2023-11-28 1:26 ` pr-tracker-bot
2023-11-10 7:16 Steve French
2023-11-10 18:47 ` pr-tracker-bot
2023-11-02 2:46 Steve French
2023-11-02 18:38 ` pr-tracker-bot
2023-10-15 2:46 Steve French
2023-10-15 2:52 ` pr-tracker-bot
2023-10-08 4:27 Steve French
2023-10-08 18:06 ` pr-tracker-bot
2023-09-29 22:11 Steve French
2023-09-29 23:59 ` pr-tracker-bot
2023-09-17 1:55 Steve French
2023-09-17 18:24 ` pr-tracker-bot
2023-08-09 23:11 Steve French
2023-08-10 5:02 ` pr-tracker-bot
2023-07-26 6:17 Steve French
2023-07-26 18:42 ` pr-tracker-bot
2023-06-30 5:59 Steve French
2023-07-01 5:04 ` pr-tracker-bot
2023-06-20 4:45 Steve French
2023-06-20 19:01 ` pr-tracker-bot
2023-06-11 1:59 Steve French
2023-06-11 17:43 ` pr-tracker-bot
2023-05-21 5:14 Steve French
2023-05-21 18:06 ` Linus Torvalds
2023-05-21 18:32 ` Linus Torvalds
2023-05-21 19:03 ` Steve French
2023-05-21 19:21 ` Linus Torvalds
2023-05-22 4:38 ` Steve French
2023-05-22 8:04 ` ronnie sahlberg
2023-05-21 18:09 ` pr-tracker-bot
2023-05-06 0:19 Steve French
2023-05-06 2:20 ` pr-tracker-bot
2023-04-27 2:11 Steve French
2023-04-29 18:19 ` pr-tracker-bot
2023-04-07 4:16 Steve French
2023-04-07 20:56 ` pr-tracker-bot
2023-03-25 0:00 Steve French
2023-03-25 1:18 ` pr-tracker-bot
2023-02-22 4:15 Steve French
2023-02-22 22:26 ` pr-tracker-bot
2023-01-28 1:45 Steve French
2023-01-28 19:33 ` pr-tracker-bot
2023-01-10 3:13 Steve French
2023-01-10 11:36 ` pr-tracker-bot
2022-12-15 3:18 Steve French
2022-12-15 17:32 ` Linus Torvalds
2022-12-15 18:28 ` pr-tracker-bot
2022-10-06 23:53 Steve French
2022-10-07 17:00 ` pr-tracker-bot
2022-08-19 5:03 Steve French
2022-08-19 21:14 ` pr-tracker-bot
2022-08-08 20:00 Steve French
2022-08-09 3:20 ` pr-tracker-bot
2022-06-28 22:07 Steve French
2022-06-29 16:44 ` pr-tracker-bot
2022-06-01 6:20 Steve French
2022-06-01 19:34 ` pr-tracker-bot
2022-04-24 0:10 Steve French
2022-04-24 0:32 ` pr-tracker-bot
2022-04-01 18:40 Steve French
2022-04-01 21:41 ` Linus Torvalds
2022-04-01 21:45 ` pr-tracker-bot
2022-03-29 1:39 Steve French
2022-03-30 1:48 ` Linus Torvalds
2022-03-30 1:57 ` Steve French
2022-03-30 2:23 ` Linus Torvalds
2022-03-30 9:18 ` Christoph Hellwig
2022-03-30 9:17 ` Christoph Hellwig
2022-04-01 1:20 ` Al Viro
2022-04-01 12:52 ` Namjae Jeon
2022-04-01 13:34 ` Al Viro
2022-04-01 14:58 ` Namjae Jeon
2022-02-07 21:04 Steve French
2022-02-07 23:34 ` pr-tracker-bot
2021-11-27 21:43 Steve French
2021-11-27 22:52 ` pr-tracker-bot
2021-09-26 12:13 Steve French
2021-09-26 21:11 ` pr-tracker-bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=CAH2r5mspnU4XxcU9Vr98PeY1iMVag9QpxdB72GO5t4EExbKkRQ@mail.gmail.com \
--to=smfrench@gmail.com \
--cc=linux-cifs@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).