linux-kernel - [GIT PULL] Third round of NFSD fixes for v6.18

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20251112175354.13059-1-cel@kernel.org>
Date: Wed, 12 Nov 2025 12:53:54 -0500
From: Chuck Lever <cel@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: <linux-nfs@...r.kernel.org>,
	<linux-kernel@...r.kernel.org>,
	Jeff Layton <jlayton@...nel.org>
Subject: [GIT PULL] Third round of NFSD fixes for v6.18

The following changes since commit 3e7f011c255582d7c914133785bbba1990441713:

  Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (2025-10-21 11:03:50 -0400)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/cel/linux.git tags/nfsd-6.18-3

for you to fetch changes up to 324be6dcbf09133a322db16977a84fbb45c16129:

  Revert "SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it" (2025-11-10 09:31:52 -0500)

----------------------------------------------------------------
nfsd-6.18 fixes:

Address recently reported issues or issues found at the recent NFS
bake-a-thon held in Raleigh, NC.

Issues reported with v6.18-rc:
- Address a kernel build issue
- Reorder SEQUENCE processing to avoid spurious NFS4ERR_SEQ_MISORDERED

Issues that need expedient stable backports:
- Close a refcount leak exposure
- Report support for NFSv4.2 CLONE correctly
- Fix oops during COPY_NOTIFY processing
- Prevent rare crash after XDR encoding failure
- Prevent crash due to confused or malicious NFSv4.1 client

----------------------------------------------------------------
Chuck Lever (3):
      NFSD: Skip close replay processing if XDR encoding fails
      NFSD: Never cache a COMPOUND when the SEQUENCE operation fails
      Revert "SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it"

NeilBrown (2):
      nfsd: fix refcount leak in nfsd_set_fh_dentry()
      nfsd: ensure SEQUENCE replay sends a valid reply.

Olga Kornievskaia (2):
      nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes
      NFSD: free copynotify stateid in nfs4_free_ol_stateid()

 fs/nfsd/nfs4state.c | 68 ++++++++++++++++++++++++++++++++++++++---------------
 fs/nfsd/nfs4xdr.c   |  5 ++--
 fs/nfsd/nfsd.h      |  1 +
 fs/nfsd/nfsfh.c     |  6 ++---
 fs/nfsd/xdr4.h      |  3 ++-
 net/sunrpc/Kconfig  |  3 +--
 6 files changed, 58 insertions(+), 28 deletions(-)