[GIT PULL] ksmbd server fixes for 7.3-rc2
From: Namjae Jeon
Date: Tue Sep 01 2026 - 06:15:34 EST
Hi Linus,
This is ksmbd server fixes pull request for v7.3-rc2. I add a description of
this pull request below. Please pull ksmbd with following ones.
Thanks!
The following changes since commit 0a0d1d55dad570724bf8c7ea83409639cfb4be9b:
Merge tag 'scftorture.2026.08.18a' of
git://git.kernel.org/pub/scm/linux/kernel/git/rcu/linux (2026-08-23
19:28:04 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb.git
tags/ksmbd-for-7.3-rc2
for you to fetch changes up to ba9572bc43d04d71ba52ae7f20645f1eafe86875:
ksmbd: validate normalized name response length (2026-08-31 19:27:36 +0900)
----------------------------------------------------------------
- Prevent unintended data exposure by clearing pipe compound padding and
the response buffer.
- Initialize missing fields in FS_OBJECT_ID_INFORMATION,
FS_CONTROL_INFORMATION, and FS_POSIX_INFORMATION.
- Propagate DACL parsing and allocation failures so malformed security
descriptors are rejected.
- Rate-limit errors for unmapped SIDs to prevent kernel log flooding.
- Drain multichannel sessions during LOGOFF, wake deferred locks and
cancellable requests, and ensure cancellation callbacks run only once.
- Fix listener kthread reference handling and teardown ordering during
netdevice events.
- Validate normalized-name and IPC share configuration response lengths.
- Update the KSMBD MAINTAINERS entry and add Paulo Alcantara as
an SMBDIRECT co-maintainer.
----------------------------------------------------------------
Aleksandr Khromov (3):
ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
Alon Shakevsky (1):
ksmbd: validate normalized name response length
Namjae Jeon (8):
MAINTAINERS: Add Paulo Alcantara as an SMBDIRECT co-maintainer
MAINTAINERS: Update the KSMBD entry
ksmbd: safely drain sessions during logoff
ksmbd: zero pipe read compound padding
ksmbd: propagate DACL parsing errors
ksmbd: rate limit unmapped SID errors
ksmbd: prevent out-of-bounds reads in share config responses
ksmbd: fix listener task lifetime on netdev events
MAINTAINERS | 5 +--
fs/smb/server/connection.c | 8 +++--
fs/smb/server/mgmt/share_config.c | 40 +++++++++++++++-------
fs/smb/server/mgmt/user_session.c | 13 ++++++-
fs/smb/server/mgmt/user_session.h | 1 +
fs/smb/server/smb2pdu.c | 72 ++++++++++++++++++++++++++++++++++-----
fs/smb/server/smbacl.c | 67 +++++++++++++++++++++---------------
fs/smb/server/transport_ipc.c | 21 ++++++++----
fs/smb/server/transport_tcp.c | 36 +++++++++++++++-----
fs/smb/server/vfs_cache.c | 17 +++++++--
fs/smb/server/vfs_cache.h | 1 +
11 files changed, 208 insertions(+), 73 deletions(-)