[PATCH 0/2] nfsd: fix two mount-crossing regressions from the v7.4 merge window

[orkunsari via B4 Relay]

Two fixes for code merged for v7.4-rc1; released kernels are not
affected.

Patch 1 fixes the NFSv2/v3 CREATE paths, which pass the dentry returned
by nfsd_cross_mnt() to end_creating() and so unlock the wrong directory
when the target file has something mounted on it.

Patch 2 makes nfsd_cross_mnt() check access to the export being entered
rather than the one being left, and restores the check after ".." in
nfsd_lookup(). SECINFO keeps its previous behaviour and does not return
NFS4ERR_WRONGSEC.

Both were found by AI-assisted code review (Claude Code). The fixes are
build-tested with W=1 only; no reproducer was run.

---
orkunsari (2):
      nfsd: unlock the locked parent after crossing a mount in CREATE
      nfsd: check access to the export being entered when crossing mounts

 fs/nfsd/nfs3proc.c | 14 +++++++++++---
 fs/nfsd/nfsproc.c  | 14 +++++++++++---
 fs/nfsd/vfs.c      | 46 +++++++++++++++++++++++++++++++++++++++-------
 3 files changed, 61 insertions(+), 13 deletions(-)
---
base-commit: 6628e7d4c6b25c8d18f1345e3a20d21829aae7e4
change-id: 20261104-nfsd-cross-mnt-1f84d7972869

Best regards,
--  
orkunsari <sariorkunemin@xxxxxxxxx>