[PATCH net 0/5] rxrpc: Miscellaneous fixes

From: David Howells

Date: Tue Jun 16 2026 - 12:14:13 EST


Here are some miscellaneous AF_RXRPC fixes for more stuff found by Sashiko[1]:

(1) Reject ACKALL packets for calls not in Tx or immediate post-Tx state.

(2) Fix connection leak from AF_RXRPC recvmsg userspace OOB handling.

(3) Fix double unlock in AF_RXRPC recvmsg userspace OOB handling.

(4) Fix AFS preallocate charge to flush the waitqueue after unlistening
the socket so that any charging thread that does manage to get started
will be waited for before socket destruction.

(5) Fix AFS OOB notify handling to cancel in-progress OOB notification
handling and then to flush the workqueue it's on.

David

The patches can be found here also:

http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/log/?h=rxrpc-fixes

[1] https://sashiko.dev/#/patchset/20260609140911.838677-1-dhowells%40redhat.com

David Howells (4):
rxrpc: Fix leak of connection from OOB challenge
rxrpc: Fix double unlock in rxrpc_recvmsg()
afs: Fix further netns teardown to cancel the preallocation charger
afs: Fix uncancelled rxrpc OOB message handler

Wyatt Feng (1):
rxrpc: input: reject ACKALL outside transmit phase

fs/afs/cm_security.c | 3 ++-
fs/afs/rxrpc.c | 5 ++++-
net/rxrpc/input.c | 16 +++++++++++++++-
net/rxrpc/oob.c | 5 +++++
net/rxrpc/recvmsg.c | 2 +-
5 files changed, 27 insertions(+), 4 deletions(-)