[PATCH 0/3] afs: Miscellaneous fixes

From: David Howells

Date: Thu Jul 23 2026 - 07:41:19 EST


Hi Christian,

Can you pick up these miscellaneous AFS fixes, please? Note that most of
these are derived from Sashiko review of some rxrpc patches[1][2].

(1) Fix afs_fs_fetch_data() to set call->async.

(2) Fix afs_fs_fetch_data() to subtract transferred from len instead of
adding it.

(3) Fix a UAF when sending a message if the call is completed so quickly
that the sending code hasn't finished with it when it gets freed.

The patches can be found here:

https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/log/?h=afs-fixes

Thanks,
David

[1] https://sashiko.dev/#/patchset/20260702144919.172295-1-dhowells%40redh
[2] https://sashiko.dev/#/patchset/20260713081022.2186481-1-dhowells%40red

David Howells (3):
afs: Fix afs_fs_fetch_data() to set call->async
afs: Fix afs_fs_fetch_data() to subtract transferred from len
afs: Fix UAF when sending a message

fs/afs/fsclient.c | 5 ++++-
fs/afs/internal.h | 3 ++-
2 files changed, 6 insertions(+), 2 deletions(-)