diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2026-09-25 13:30:04 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2026-09-25 13:30:04 -0700 |
| commit | f14572c203d57492e1d4e5d7851a3b143e083b82 (patch) | |
| tree | 3e509947147565629021a557b21e272d585bbb45 /arch/parisc/kernel/firmware.c | |
| parent | aa98230e410f0ed212b6788c46b1e4d49e0ff7ca (diff) | |
| parent | e66cf1625ec4a3fe68346119f371def713fd0a4d (diff) | |
Pull smb client fixes from Paulo Alcantara:
- Fix leaked server handles and dropped errors in the SMB2 compound
create path: a parsing error reported as success, an earlier CREATE
left open when a later command fails, the cached directory open
losing the FID needed for cleanup, and SMB2_open() not closing the
handle after a create-context parse failure
- Fix out-of-bounds reads when parsing create contexts from a
malicious server: bound each context by its Next field, parse the
lease and QFid contexts from their declared offsets and validate
the POSIX create context length
- Fix a double credit decrement, and its warning, when a compound
send fails and triggers a reconnect; found by syzbot
- Fix a dentry and server handle leak in cifs_atomic_open() when an
O_CREAT open resolves to a symlink or other non-regular inode
- Use GFP_KERNEL in the DFS get_targets() path
- Minor update to the POSIX extension specification references
* tag 'cifs-fixes-7.3-rc5' of https://git.manguebit.org/linux:
smb: client: use finish_no_open() for non-regular inodes
smb: client: use GFP_KERNEL in get_targets()
smb: client: update POSIX extension specification references
smb: client: preserve create-context parsing errors
smb: client: close completed creates on compound wait errors
smb: client: clean up failed cached directory opens
smb: client: close handle after create-context parsing failure
smb: client: validate POSIX create context length
smb: client: fix create context out-of-bounds reads
smb: client: delete compound mids on send failure before unlock
Diffstat (limited to 'arch/parisc/kernel/firmware.c')
0 files changed, 0 insertions, 0 deletions
