[GIT PULL] ksmbd server fixes
Steve French <[email protected]> Fri, 31 Jul 2026 19:29:21 -0500
| Newsgroups | org.kernel.vger.linux-cifs,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <CAH2r5ms7t38Yx5ryMJtMSH28Neh+sKQPL0vmW_3hHROVYmqehQ@mail.gmail.com> |
Please pull the following changes since commit
f5098b6bae761e346ebcd9da7f95622c04733cff:
Linux 7.2-rc5 (2026-07-26 14:45:48 -0700)
are available in the Git repository at:
git://git.samba.org/ksmbd.git tags/v7.2-rc5-smb3-server-fixes
for you to fetch changes up to e8bb506e6ef749ac0336f3e579d8d02396b7d832:
ksmbd: use memcmp() to compare ClientGUIDs (2026-07-30 18:45:57 -0500)
----------------------------------------------------------------
Three ksmbd server fixes:
- Use memcmp() when comparing fixed-size binary ClientGUIDs, so
embedded NUL bytes are handled correctly.
- Reject repeated SMB2 NEGOTIATE requests after dialect selection.
This prevents preauth_info leaks, enforces the SMB2 protocol
requirements, and serializes negotiation state updates.
- Fix a use-after-free in __close_file_table_ids() by removing the
volatile file ID from the owning IDR before dropping the IDR reference.
----------------------------------------------------------------
Namjae Jeon (3):
ksmbd: fix use-after-free in __close_file_table_ids()
ksmbd: reject repeated SMB2 NEGOTIATE requests
ksmbd: use memcmp() to compare ClientGUIDs
fs/smb/server/connection.h | 5 +++++
fs/smb/server/smb2pdu.c | 14 ++++----------
fs/smb/server/smb_common.c | 37 ++++++++++++++++++++++++++++++-------
fs/smb/server/vfs_cache.c | 2 ++
4 files changed, 41 insertions(+), 17 deletions(-)
--
Thanks,
Steve