From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-yx1-f45.google.com (mail-yx1-f45.google.com [74.125.224.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AFCB73EE1C1 for ; Fri, 8 May 2026 17:05:54 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=pass smtp.client-ip=74.125.224.45 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778259956; cv=pass; b=l3uAXDhGaSpS2ZFQRjT0s9SLlWjCTXubO0MGVzuAtaRi4c+gg1rgEc/Ya1CX06JlcONO1RATtZI179x4dmu4s1c8LICiXWwAAb5Lasd2gHobQx03gPY75xtXaVhfHC5CqFVN7t+xGHZf6PDvqGgYEzOmpDskRweXhMSPYgJiOtw= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778259956; c=relaxed/simple; bh=dfIp0LQRh2UCGWN/hJmgh8ibRfgnEyeX9Lkx/QxQfTI=; h=MIME-Version:From:Date:Message-ID:Subject:To:Cc:Content-Type; b=UlyAOFyEGgrPN9zJhYbVkC+8C3z4tSuSLj+fWonZsLwCfn0D0Q7Q16HEUJzv4COKl1LJA+8Wdt7kKWrfKUcK0YyBz0xDzyrFX0czLpk1ef0peSV8jrNaIh/ijl6p7U1uLyll3WM7EklKE/bMEI9Yy+Xovs/oBjqf49QD5OtQuJ4= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=E475cqDd; arc=pass smtp.client-ip=74.125.224.45 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="E475cqDd" Received: by mail-yx1-f45.google.com with SMTP id 956f58d0204a3-65c52bb5dd7so2265082d50.2 for ; Fri, 08 May 2026 10:05:54 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1778259954; cv=none; d=google.com; s=arc-20240605; b=h1YqB0Upsb5nTE452cl5tQm5LOq8wfYYYCF980ZoONPb6Sj6ZR1A8mWV55LHmPtnfI 4NJtsfDGIdVWY+c5Lr8DtGNkGx2Qe7tvfL43omzSzPXj7NwZcUng7s/X1k401qREiFX2 FkG4NF/KDgo+80DTFzKmZM3UmyQCL1ZuFYeJ2yQvfsGOcZhy0fMWFZ8Ap5o7j9YrhDeA gTT1MJV9GIO8qSt1YRRF50cBVn+rjLGydET0BWIrljSNSl17mawV6RcuwcFCxJSI4kYj /Y0aMhAuUEj2Kg6X82u00UvaEoi0ZrEujzlzKLwXl5oAi46VKhXci+mycPEdEwu6bFgl uEyA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:mime-version:dkim-signature; bh=gZd86MkHJefRFGSbIb9rgXR/bDmHvyHfi77iZUnuLYU=; fh=QpxoHSIlkfIYj1aYRF3C4wD+mSZqZCiSuESim4roV6E=; b=MwlNelYH41eb9tZTenAwRA69bQmRqReAsq1PKxxuWDXs9uoYZp/w+TTiSWgijiz67R vVmrOVlc1SEwb0HlOTyCZKpv4ZNX+x7ezjFj8zhUZospMgE8pQeSSGhgMJywPo5yuOwX a3VK3nZwVjJFOOd3T/VaUKGeOUQWXOinoziUN/JJFbRMnFuHTwemY9k2zoLWHrW+WSjY Zdzn8y6qT4CDKRDfxsCYA3Sjvd2BdGbQBYUwE8uQjiJzegLLPSL/YSB/bg9eJp7SlRlY YJL3DRh2kfMcXNx6uA6oapvabxTdm8n7x+AtRXUylC1wetlBBBLRcwYSNHMn780PKFQG /N6w==; darn=vger.kernel.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1778259954; x=1778864754; darn=vger.kernel.org; h=cc:to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=gZd86MkHJefRFGSbIb9rgXR/bDmHvyHfi77iZUnuLYU=; b=E475cqDd86AE8Y36lIablV4NI35xSxWC1PNOHgHnlmgek71o2izzq3xNAvn4BqPPNu vfST/zpL1shFBKAI1Yz9wFA7t/dzW34OfTeYAVYUzxLMtMz7L6p1ONzg/LJ4xRQb/O4F QsWo5/bFoAkeSGCKAZln6KWGYGi3M2cdgmF8qtP2VSfYvM2sZVGJntE3l69acQbciXjz XZsSC8lBKdAtBCmhg/C8tkiFtxQiAX/0uaDfP/SBFGVjFZTj580XQS8bmCjao+GNHGoZ PFcae2PGdfPV3e4EbviLev/hU7C79mt7GxL8Mo0GJTyZVbJ+o2ruk2RH9KE23ObJFCXp 5ZvA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778259954; x=1778864754; h=cc:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=gZd86MkHJefRFGSbIb9rgXR/bDmHvyHfi77iZUnuLYU=; b=lV4pA+49mhEKt/3tEfzKzAL0Fe/q5XwYy1JlAL/71crNGnQ8QHd2C+84q2g+Lbuma4 fENzmeBStRtNrwhsbDrYeFCokY+Gg3Grf2zzQ9o9eyFfrDJKgbqE0vZrboNuXQFzWWZL vehV/UbRrrs0VTsqibwlPwuT11zb9p8n4QSMC0pT84PI2IVMEBRRKpRUGNLkbY8PEq2s pcOxzHmHEBUiRg9fkyToYCmi/eKe5zLNAfkwxIZkf5q37eRgQALfWHDUCmHILRW9QNeO J75ODH1Xd+eowKGKJnWE6uzXceV5umBY71owvG2vgH1CeUpEsMQXpHzMdyj5zpw71Kjs rbsg== X-Gm-Message-State: AOJu0YxJX5T+U7DV6D+VVHppDVk8xGhjXMg9Tm8Ts56bzY8K+4gf4VbO JbMhLLBLGpAAreq0nLp6QMSaVZrMkBPRtQJnPVEbwI+lzAn/OqPt6Bq+oDb6bP9LJJyFTSch7zn wtVWfwYaMp6EL06FzMuAWxiiyUurXlSQqkBAP X-Gm-Gg: Acq92OG6ZWWqDsGb+gMUWZvW2B3qr8zPPBhdOIss6j9lxN5664OkguHKrOp7VsDEwUY /AkIiZekR7beS2Kln8YulRdMIJnpG+wiGbfoY30F5kGAQSXggW0RPx2Ju3ra4Iod8fGIG0/SrYB bPR6Ho8NzRgxG/9patqHm/W+7C2ZubMnEM4vc91SHW222eSEqE/II1rNpFRs6R1ILVy7ZWCWejG BaPLYy/Uo2RA35X0g70SgXUSAwKctyvRf4pX09CaX8kA7RZl2WLYYNB65O7iG+TuKSITiMQKJha UdEWSKGUCwhuDfVY4k9A3ZczLerhJheiHSo8qPB0jmfIwEKvTHpz1wqG77r2PvHVGI4R1yX5KXp kAJXuP5o9KBYmvElz2E8/oh8Ld1e5mSHWk5GrGFJKp5VKt6tKaTe1oa32Ujn7VnXslsTWImSHp5 aIRZDo4E9Rn1jJCQc3chV2pTAl44arNjR1 X-Received: by 2002:a05:690e:4397:b0:65c:2ac8:ec3d with SMTP id 956f58d0204a3-65c798f901bmr8869482d50.21.1778259953641; Fri, 08 May 2026 10:05:53 -0700 (PDT) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 From: Steve French Date: Fri, 8 May 2026 12:05:41 -0500 X-Gm-Features: AVHnY4LVjQvpefvoI4Yk3kVqjF-5aoZOSVH261ef8XF6BwiPwc-u8VtaOZXdTTs Message-ID: Subject: [GIT PULL] smb3 client fixes To: Linus Torvalds Cc: LKML , CIFS Content-Type: text/plain; charset="UTF-8" Please pull the following changes since commit 7fd2df204f342fc17d1a0bfcd474b24232fb0f32: Linux 7.1-rc2 (2026-05-03 14:21:25 -0700) are available in the Git repository at: git://git.samba.org/sfrench/cifs-2.6.git tags/v7.1-rc3-smb3-client-fixes for you to fetch changes up to f98b48151cc502ada59d9778f0112d21f2586ca3: smb: client: validate dacloffset before building DACL pointers (2026-05-07 14:09:36 -0500) ---------------------------------------------------------------- Seven client fixes - Fix for two ACL issues (security fix to validate dacloffset better and chmod fix) - Fix two out of bounds read (in check_wsl_eas and smb2_check_msg for symlinks) - Two Kerberos fixes including an important one when AES-256 encryption chosen - Fix open_cached_dir problem when directory leases disabled ---------------------------------------------------------------- Bjoern Doebel (1): smb: client: use kzalloc to zero-initialize security descriptor buffer Michael Bommarito (1): smb: client: validate dacloffset before building DACL pointers Piyush Sachdeva (2): smb: client: Use FullSessionKey for AES-256 encryption key derivation smb: client: Zero-pad short GSS session keys per MS-SMB2 Shyam Prasad N (1): cifs: abort open_cached_dir if we don't request leases Zisen Ye (2): smb/client: fix out-of-bounds read in symlink_data() smb/client: fix out-of-bounds read in smb2_compound_op() fs/smb/client/cached_dir.c | 8 ++++++++ fs/smb/client/cifsacl.c | 37 +++++++++++++++++++++++++++++++++---- fs/smb/client/ioctl.c | 2 +- fs/smb/client/smb2inode.c | 12 ++++++++---- fs/smb/client/smb2misc.c | 3 ++- fs/smb/client/smb2pdu.c | 23 ++++++++++++++++++----- fs/smb/client/smb2transport.c | 35 ++++++++++++++++++++++++++--------- 7 files changed, 96 insertions(+), 24 deletions(-) -- Thanks, Steve