linux-kernel - [GIT PULL[ ksmbd server fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAH2r5msK2mYp39bX0=R+phV--knmAcLCXTdqYSWfuEfb=59dxA@mail.gmail.com>
Date: Mon, 15 Dec 2025 23:06:36 -0600
From: Steve French <smfrench@...il.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Namjae Jeon <linkinjeon@...nel.org>, CIFS <linux-cifs@...r.kernel.org>, 
	LKML <linux-kernel@...r.kernel.org>, 
	"Stefan (metze) Metzmacher" <metze@...ba.org>
Subject: [GIT PULL[ ksmbd server fixes

Please pull the following changes since commit
8f0b4cce4481fb22653697cced8d0d04027cb1e8:

  Linux 6.19-rc1 (2025-12-14 16:05:07 +1200)

are available in the Git repository at:

  git://git.samba.org/ksmbd.git tags/v6.19-rc1-ksmbd-server-fixes

for you to fetch changes up to 95d7a890e4b03e198836d49d699408fd1867cb55:

  ksmbd: fix buffer validation by including null terminator size in EA
length (2025-12-14 18:35:56 -0600)

----------------------------------------------------------------
Seven smb3 server fixes
- Fix set xattr name validation
- Fix session refcount leak
- Two minor cleanup
- Three smbdirect (RDMA) fixes (improve receive completion, and connect)
----------------------------------------------------------------
Alexey Velichayshiy (1):
      ksmbd: remove redundant DACL check in smb_check_perm_dacl

Chen Ni (1):
      ksmbd: convert comma to semicolon

Namjae Jeon (2):
      ksmbd: Fix refcount leak when invalid session is found on session lookup
      ksmbd: fix buffer validation by including null terminator size
in EA length

Stefan Metzmacher (3):
      smb: smbdirect: introduce smbdirect_socket.connect.{lock,work}
      smb: server: initialize recv_io->cqe.done = recv_done just once
      smb: server: defer the initial recv completion logic to
smb_direct_negotiate_recv_work()

 fs/smb/common/smbdirect/smbdirect_socket.h |  12 ++++
 fs/smb/server/mgmt/user_session.c          |   4 +-
 fs/smb/server/smb2pdu.c                    |   4 +-
 fs/smb/server/smbacl.c                     |   3 -
 fs/smb/server/transport_rdma.c             | 175
++++++++++++++++++++++++++++++++++++++++++---------
 fs/smb/server/vfs.c                        |   2 +-
 6 files changed, 164 insertions(+), 36 deletions(-)

-- 
Thanks,

Steve