[PATCH 00/19] nfsd: more bugfixes

From: Jeff Layton

Date: Tue Jun 09 2026 - 13:54:48 EST


This is a pile of bugfixes found via LLM inspection. Most of these don't
seem to be easily triggerable or require specific conditions, but
they're still bugs nonetheless. Please consider these for v7.3.

Signed-off-by: Jeff Layton <jlayton@xxxxxxxxxx>
---
Jeff Layton (19):
nfs/localio: fix nfsd_file ref leak on nfs_local_doio() init failure
nfsd: clear opcnt on compound arg release to prevent OOB read
nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry
nfsd: fix netlink dumpit error handling for rpc_status_get
sunrpc: defer rq_argp and rq_resp free until after RCU grace period
nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
nfsd: add filehandle match check to nfsd4_delegreturn()
nfsd: validate nseconds in TIME_DELEG decode paths
nfsd: remove premature NFS4_OO_CONFIRMED in CLAIM_PREVIOUS path
nfsd: fix version mismatch loops in nfsd_acl_init_request()
nfsd: fix FL_SLEEP being set unconditionally for all LOCK types
nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
nfsd: fix clock domain mismatch in clients_still_reclaiming()
nfsd: use test_and_clear_bit for somebody_reclaimed to prevent lost update
nfsd: reject reclaim LOCK after RECLAIM_COMPLETE
nfsd: validate sockaddr length per family in listener_set
lockd, nfsd: RCU-protect nlmsvc_ops dispatch
nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
nfsd: initialize DRC hash table before registering shrinker

Documentation/netlink/specs/nfsd.yaml | 4 +++
fs/lockd/svc.c | 4 +--
fs/lockd/svc4proc.c | 4 +--
fs/lockd/svcproc.c | 4 +--
fs/lockd/svcsubs.c | 52 +++++++++++++++++++++++++----
fs/nfs/localio.c | 16 +++++++--
fs/nfsd/lockd.c | 6 ++--
fs/nfsd/netlink.c | 2 +-
fs/nfsd/netns.h | 1 +
fs/nfsd/nfs4callback.c | 4 +++
fs/nfsd/nfs4proc.c | 3 +-
fs/nfsd/nfs4state.c | 22 +++++++++----
fs/nfsd/nfs4xdr.c | 5 +++
fs/nfsd/nfscache.c | 4 +--
fs/nfsd/nfsctl.c | 61 +++++++++++++++++++++++++++++------
fs/nfsd/nfsproc.c | 7 ++++
fs/nfsd/nfssvc.c | 4 +--
include/linux/lockd/bind.h | 12 +++++--
net/sunrpc/svc.c | 13 ++++++--
19 files changed, 182 insertions(+), 46 deletions(-)
---
base-commit: dd886cc1628e04a21a34016635b2b833916a1003
change-id: 20260608-nfsd-testing-688a82433c50

Best regards,
--
Jeff Layton <jlayton@xxxxxxxxxx>