Please pull the following changes since commit 39cd87c4eb2b893354f3b850f916353f2658ae6f: Linux 6.9-rc2 (2024-03-31 14:32:39 -0700) are available in the Git repository at: git://git.samba.org/sfrench/cifs-2.6.git tags/6.9-rc2-smb3-client-fixes for you to fetch changes up to e0e50401cc3921c9eaf1b0e667db174519ea939f: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() (2024-04-03 14:45:15 -0500) ---------------------------------------------------------------- 17 cifs.ko changesets, most also for stable - fix to retry close to avoid potential handle leaks when server returns EBUSY - Three DFS fixes including a fix for potential use after free - fscache fix - minor strncpy cleanup - reconnect race fix - series of patches to deal with various possible race conditions (UAFs) tearing sessions down The important fix to support password rotation is not included in this P/R (am giving that patch more time for any additional review feedback) but should be ready to send next week. ---------------------------------------------------------------- David Howells (1): cifs: Fix caching to try to do open O_WRONLY as rdwr on server Justin Stitt (1): smb: client: replace deprecated strncpy with strscpy Paulo Alcantara (14): smb: client: fix UAF in smb2_reconnect_server() smb: client: guarantee refcounted children from parent session smb: client: refresh referral without acquiring refpath_lock smb: client: handle DFS tcons in cifs_construct_tcon() smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex smb: client: fix potential UAF in cifs_debug_files_proc_show() smb: client: fix potential UAF in cifs_dump_full_key() smb: client: fix potential UAF in cifs_stats_proc_write() smb: client: fix potential UAF in cifs_stats_proc_show() smb: client: fix potential UAF in smb2_is_valid_lease_break() smb: client: fix potential UAF in smb2_is_valid_oplock_break() smb: client: fix potential UAF in is_valid_oplock_break() smb: client: fix potential UAF in smb2_is_network_name_deleted() smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() Ritvik Budhiraja (1): smb3: retrying on failed server close fs/smb/client/cached_dir.c | 6 +- fs/smb/client/cifs_debug.c | 6 ++ fs/smb/client/cifsfs.c | 11 +++ fs/smb/client/cifsglob.h | 19 ++++-- fs/smb/client/cifsproto.h | 20 +++--- fs/smb/client/cifssmb.c | 6 +- fs/smb/client/connect.c | 153 +++++++++++++++++++++++++++--------------- fs/smb/client/dfs.c | 51 +++++++------- fs/smb/client/dfs.h | 33 +++++---- fs/smb/client/dfs_cache.c | 53 +++++++-------- fs/smb/client/dir.c | 15 +++++ fs/smb/client/file.c | 111 +++++++++++++++++++++++++----- fs/smb/client/fs_context.c | 6 +- fs/smb/client/fs_context.h | 12 ++++ fs/smb/client/fscache.h | 6 ++ fs/smb/client/ioctl.c | 6 +- fs/smb/client/misc.c | 8 +-- fs/smb/client/smb1ops.c | 4 +- fs/smb/client/smb2misc.c | 4 ++ fs/smb/client/smb2ops.c | 13 ++-- fs/smb/client/smb2pdu.c | 2 +- fs/smb/client/smb2transport.c | 2 +- 22 files changed, 369 insertions(+), 178 deletions(-) -- Thanks, Steve