Re: [PATCH 6.6.y 0/1] ksmbd: validate owner of durable handle on reconnect
From: Sasha Levin
Date: Sun May 24 2026 - 08:10:21 EST
> This patch backports upstream commit 49110a8ce654 ("ksmbd: validate owner
> of durable handle on reconnect") to the 6.6.y stable branch to address
> CVE-2026-31717.
> [...]
> An additional adaptation was needed for 6.6.y: in ksmbd_free_global_file_table(),
> the call to ksmbd_destroy_file_table(&global_ft) was replaced with
> idr_destroy/kfree, since the function changed to take a
> struct ksmbd_session *. This matches the approach in upstream commit
> d484d621d40f ("ksmbd: add durable scavenger timer").
Thanks for the backport. The 6.12.y version has been queued.
For 6.6.y, the diff isn't a straight cherry-pick and the rewritten
ksmbd_free_global_file_table() path in particular is a non-trivial
stable-only adaptation. Before I queue this for 6.6.y, could you get
Acks from the ksmbd maintainers on the 6.6.y diff specifically? In
particular:
Namjae Jeon <linkinjeon@xxxxxxxxxx>
Steve French <stfrench@xxxxxxxxxxxxx>
Once one of them has Ack'd the 6.6 adaptation I'll pick it up.
--
Thanks,
Sasha