linux-kernel - [GIT PULL] smb3 client fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAH2r5ms-8MBEd9ssS8vtkneFt=wKW-5MDWr-4pMf0mSZS0JH5A@mail.gmail.com>
Date: Fri, 17 Oct 2025 11:24:32 -0500
From: Steve French <smfrench@...il.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: LKML <linux-kernel@...r.kernel.org>, CIFS <linux-cifs@...r.kernel.org>
Subject: [GIT PULL] smb3 client fixes

he following changes since commit 3a8660878839faadb4f1a6dd72c3179c1df56787:

  Linux 6.18-rc1 (2025-10-12 13:42:36 -0700)

are available in the Git repository at:

  git://git.samba.org/sfrench/cifs-2.6.git tags/6.18-rc1-smb-client-fixes

for you to fetch changes up to 3c15a6df61bab034b087f00181408b1537a535bb:

  smb: client: Consolidate cmac(aes) shash allocation (2025-10-15
22:10:28 -0500)

----------------------------------------------------------------
smb client fixes, security and smbdirect improvements, and some minor cleanup
- Important OOB DFS fix
- Fix various potential tcon refcount leaks
- Eleven smbdirect (RDMA) fixes (following up from test event a few weeks ago):
   -- Fixes to improve and simplify handling of memory lifetime of
smbdirect_mr_io
   structures, when a connection gets disconnected.
   -- Make sure we really wait to reach SMBDIRECT_SOCKET_DISCONNECTED
   before destroying resources.
   -- Make sure the send/recv submission/completion queues are
   large enough to avoid ib_post_send() from failing under
   pressure.
- Eight patches to convert cifs.ko to use the recommended crypto
libraries (instead of crypto_shash), this also can improve performance
- Three small cleanup patches

If you prefer to wait on the crypto library changes, that is fine, but
they tested well and got multiple reviews and look good.
----------------------------------------------------------------
Eric Biggers (8):
      smb: client: Use SHA-512 library for SMB3.1.1 preauth hash
      smb: client: Use HMAC-SHA256 library for key generation
      smb: client: Use HMAC-SHA256 library for SMB2 signature calculation
      smb: client: Use MD5 library for M-F symlink hashing
      smb: client: Use MD5 library for SMB1 signature calculation
      smb: client: Use HMAC-MD5 library for NTLMv2
      smb: client: Remove obsolete crypto_shash allocations
      smb: client: Consolidate cmac(aes) shash allocation

Eugene Korenevsky (1):
      cifs: parse_dfs_referrals: prevent oob on malformed input

Markus Elfring (2):
      smb: client: Return a status code only as a constant in sid_to_id()
      smb: client: Omit one redundant variable assignment in cifs_xattr_set()

Shuhao Fu (1):
      smb: client: Fix refcount leak for cifs_sb_tlink

Stefan Metzmacher (11):
      smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and
SMBDIRECT_MR_DISABLED
      smb: client: change smbd_deregister_mr() to return void
      smb: client: let destroy_mr_list() call list_del(&mr->list)
      smb: client: let destroy_mr_list() remove locked from the list
      smb: client: improve logic in allocate_mr_list()
      smb: client: improve logic in smbd_register_mr()
      smb: client: improve logic in smbd_deregister_mr()
      smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0
      smb: client: let destroy_mr_list() call ib_dereg_mr() before
ib_dma_unmap_sg()
      smb: client: let destroy_mr_list() keep smbdirect_mr_io memory
if registered
      smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED

ZhangGuoDong (1):
      smb: move some duplicate definitions to common/cifsglob.h

 fs/smb/client/Kconfig                      |   7 +-
 fs/smb/client/cifsacl.c                    |   5 +-
 fs/smb/client/cifsencrypt.c                | 201 +++++++------------
 fs/smb/client/cifsfs.c                     |   4 -
 fs/smb/client/cifsglob.h                   |  22 +-
 fs/smb/client/cifsproto.h                  |  10 +-
 fs/smb/client/inode.c                      |   6 +-
 fs/smb/client/link.c                       |  31 +--
 fs/smb/client/misc.c                       |  17 ++
 fs/smb/client/sess.c                       |   2 +-
 fs/smb/client/smb2misc.c                   |  53 ++---
 fs/smb/client/smb2ops.c                    |   8 +-
 fs/smb/client/smb2proto.h                  |   8 +-
 fs/smb/client/smb2transport.c              | 164 +++------------
 fs/smb/client/smbdirect.c                  | 321 ++++++++++++++++++++----------
 fs/smb/client/smbdirect.h                  |   2 +-
 fs/smb/client/xattr.c                      |   1 -
 fs/smb/common/cifsglob.h                   |  30 +++
 fs/smb/common/smbdirect/smbdirect_socket.h |  11 +-
 fs/smb/server/smb_common.h                 |  14 +-
 20 files changed, 419 insertions(+), 498 deletions(-)
 create mode 100644 fs/smb/common/cifsglob.h


-- 
Thanks,

Steve