[GIT PULL] ksmbd server fixes

[Steve French]

Please pull the following changes since commit
1590cf0329716306e948a8fc29f1d3ee87d3989f:

  Linux 7.2-rc4 (2026-07-19 13:54:41 -0700)

are available in the Git repository at:

  git://git.samba.org/ksmbd.git tags/v7.2-rc4-smb3-server-fixes

for you to fetch changes up to 5e1b924808568e89c5cb132ecebe1824bd91af0c:

  ksmbd: reject undersized decompressed SMB2 requests (2026-07-22
09:54:10 -0500)

----------------------------------------------------------------
This contains eight ksmbd fixes covering POSIX ACL handling, SMB signing
enforcement, DACL parsing and construction hardening, session lifetime
handling, and validation of malformed transform and compressed SMB2
requests.

 - preserve inherited POSIX ACL mask when creating objects.
 - enforce the session signing requirement for plaintext SMB requests.
 - harden DACL/ACE processing against size overflows, incomplete ACE
    copies, and undersized SIDs.
 - defer teardown of a previous session until NTLM authentication succeeds.
 - reject undersized encryption-transform and decompressed SMB2 requests
   before they can reach normal SMB2 request processing.

----------------------------------------------------------------
James Montgomery (1):
      ksmbd: defer destroy_previous_session() until after NTLM authentication

Namjae Jeon (6):
      ksmbd: preserve VFS inherited POSIX ACL mask
      ksmbd: enforce signing required by the session
      ksmbd: bound DACL dedup walk to copied ACEs
      ksmbd: validate ACE size against SID sub-authorities
      ksmbd: validate minimum PDU size for transform requests
      ksmbd: reject undersized decompressed SMB2 requests

Wentao Guan (1):
      ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL

 fs/smb/server/compress.c   |  3 ++-
 fs/smb/server/connection.c | 16 +++++++++++-----
 fs/smb/server/server.c     | 10 +++++++++-
 fs/smb/server/smb2pdu.c    | 12 +++++-------
 fs/smb/server/smbacl.c     | 36 ++++++++++++++++++++++++++----------
 fs/smb/server/vfs.c        | 26 +-------------------------
 6 files changed, 54 insertions(+), 49 deletions(-)

-- 
Thanks,

Steve