[GIT PULL] ksmbd server fixes for 7.4-rc2

[GIT PULL] ksmbd server fixes for 7.4-rc2

[Namjae Jeon]

Hi Linus,

This is ksmbd server fixes pull request for v7.4-rc2. I add a description of
this pull request below. Please pull ksmbd with following ones.

Thanks!

The following changes since commit cbbddb6b08cc9900a87cccaa9b22bbe06aa4f50a:

  Merge tag 'power-utilities-2026.10.31' of
git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux (2026-10-31
15:05:17 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb.git
tags/ksmbd-for-7.4-rc2

for you to fetch changes up to e49296d51ccbf2ad0ed0484db1382f1d7217bd6e:

  ksmbd: require NUL-terminated EA names (2026-11-03 18:23:33 +0900)

----------------------------------------------------------------
- Validate EA-name NUL termination to prevent out-of-bounds reads in debug
  logging. Return STATUS_EA_LIST_INCONSISTENT for malformed EA names in
  CREATE and SET_INFO requests.

- Grant the owner's implicit READ_CONTROL and WRITE_DAC rights when no
  ACE names it, including MAXIMUM_ALLOWED handling, while respecting
  applicable OWNER RIGHTS ACEs.

- Check group membership before granting permissions from a POSIX ACL
  group entry, preventing unintended access when a caller's UID matches
  the group's numeric GID.

- Avoid reading past the DACL when logging an access denial by printing
  the requested and allowed access masks instead.

- Handle unauthenticated sessions in procfs reporting without
  dereferencing a NULL session->user.

- Fix credential cleanup on attribute lookup failures during durable
  handle reconnect or request replay, preventing subsequent requests
  from running with another user's credentials.

- Fix read-only share handling for named stream creation, including
  AFP_AfpInfo synthesis on Time Machine shares.

- Validate DELETE access for FILE_DELETE_ON_CLOSE opens, including
  MAXIMUM_ALLOWED handling, to prevent unauthorized deletion or
  delete-pending states.

----------------------------------------------------------------
Ian Bridges (6):
      ksmbd: require DELETE access for delete-on-close opens
      ksmbd: enforce the read-only share flag when creating a stream
      ksmbd: revert fsids on durable reconnect and replay failure
      ksmbd: do not read past the DACL in the access denied debug message
      ksmbd: grant a POSIX ACL group entry only to the group's members
      ksmbd: let the owner read and change the DACL when no ACE names it

Jack Blessed Kimani (1):
      ksmbd: fix NULL pointer dereference in session_user_name() and
session_account_type()

Yifan Zhang (1):
      ksmbd: require NUL-terminated EA names

 fs/smb/server/mgmt/user_session.c |  4 ++++
 fs/smb/server/smb2pdu.c           | 34 ++++++++++++++++++++++++++++---
 fs/smb/server/smbacl.c            | 43 ++++++++++++++++++++++++++++++++-------
 3 files changed, 71 insertions(+), 10 deletions(-)

Re: [GIT PULL] ksmbd server fixes for 7.4-rc2

[pr-tracker-bot]

The pull request you sent on Sat, 7 Nov 2026 10:00:28 +0900:

> git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb.git tags/ksmbd-for-7.4-rc2

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/7f75cd8ccd9588e969158c5dc92a8cc217663f5b

Thank you!

-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html