[GIT PULL] ksmbd server fixes

Steve French <[email protected]> Fri, 31 Jul 2026 19:29:21 -0500
Newsgroups org.kernel.vger.linux-cifs,org.kernel.vger.linux-kernel
Message-ID <CAH2r5ms7t38Yx5ryMJtMSH28Neh+sKQPL0vmW_3hHROVYmqehQ@mail.gmail.com>
Please pull the following changes since commit
f5098b6bae761e346ebcd9da7f95622c04733cff:

  Linux 7.2-rc5 (2026-07-26 14:45:48 -0700)

are available in the Git repository at:

  git://git.samba.org/ksmbd.git tags/v7.2-rc5-smb3-server-fixes

for you to fetch changes up to e8bb506e6ef749ac0336f3e579d8d02396b7d832:

  ksmbd: use memcmp() to compare ClientGUIDs (2026-07-30 18:45:57 -0500)

----------------------------------------------------------------
Three ksmbd server fixes:
 - Use memcmp() when comparing fixed-size binary ClientGUIDs, so
   embedded NUL bytes are handled correctly.
 - Reject repeated SMB2 NEGOTIATE requests after dialect selection.
   This prevents preauth_info leaks, enforces the SMB2 protocol
    requirements, and serializes negotiation state updates.
 - Fix a use-after-free in __close_file_table_ids() by removing the
   volatile file ID from the owning IDR before dropping the IDR reference.
----------------------------------------------------------------
Namjae Jeon (3):
      ksmbd: fix use-after-free in __close_file_table_ids()
      ksmbd: reject repeated SMB2 NEGOTIATE requests
      ksmbd: use memcmp() to compare ClientGUIDs

 fs/smb/server/connection.h |  5 +++++
 fs/smb/server/smb2pdu.c    | 14 ++++----------
 fs/smb/server/smb_common.c | 37 ++++++++++++++++++++++++++++++-------
 fs/smb/server/vfs_cache.c  |  2 ++
 4 files changed, 41 insertions(+), 17 deletions(-)

-- 
Thanks,

Steve