This is a note to let you know that I've just added the patch titled lockd: ensure we use the correct file descriptor when unlocking to the 6.1-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: lockd-ensure-we-use-the-correct-file-descriptor-when-unlocking.patch and it can be found in the queue-6.1 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From f9d843598ec499abdb2f040a1c6665cfc7ab1b87 Mon Sep 17 00:00:00 2001 From: Jeff Layton <jlayton@xxxxxxxxxx> Date: Fri, 11 Nov 2022 14:36:37 -0500 Subject: lockd: ensure we use the correct file descriptor when unlocking From: Jeff Layton <jlayton@xxxxxxxxxx> [ Upstream commit 69efce009f7df888e1fede3cb2913690eb829f52 ] Shared locks are set on O_RDONLY descriptors and exclusive locks are set on O_WRONLY ones. nlmsvc_unlock however calls vfs_lock_file twice, once for each descriptor, but it doesn't reset fl_file. Ensure that it does. Signed-off-by: Jeff Layton <jlayton@xxxxxxxxxx> Signed-off-by: Chuck Lever <chuck.lever@xxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- fs/lockd/svclock.c | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) --- a/fs/lockd/svclock.c +++ b/fs/lockd/svclock.c @@ -659,11 +659,13 @@ nlmsvc_unlock(struct net *net, struct nl nlmsvc_cancel_blocked(net, file, lock); lock->fl.fl_type = F_UNLCK; - if (file->f_file[O_RDONLY]) - error = vfs_lock_file(file->f_file[O_RDONLY], F_SETLK, + lock->fl.fl_file = file->f_file[O_RDONLY]; + if (lock->fl.fl_file) + error = vfs_lock_file(lock->fl.fl_file, F_SETLK, &lock->fl, NULL); - if (file->f_file[O_WRONLY]) - error = vfs_lock_file(file->f_file[O_WRONLY], F_SETLK, + lock->fl.fl_file = file->f_file[O_WRONLY]; + if (lock->fl.fl_file) + error |= vfs_lock_file(lock->fl.fl_file, F_SETLK, &lock->fl, NULL); return (error < 0)? nlm_lck_denied_nolocks : nlm_granted; Patches currently in stable-queue which might be from jlayton@xxxxxxxxxx are queue-6.1/nfsd-refactor-find_file.patch queue-6.1/lockd-use-locks_inode_context-helper.patch queue-6.1/nfsd-remove-redundant-assignment-to-variable-host_err.patch queue-6.1/nfsd-ignore-requests-to-disable-unsupported-versions.patch queue-6.1/nfsd-fix-licensing-header-in-filecache.c.patch queue-6.1/nfsd-trace-stateids-returned-via-delegreturn.patch queue-6.1/lockd-ensure-we-use-the-correct-file-descriptor-when-unlocking.patch queue-6.1/nfsd-update-file_hashtbl-helpers.patch queue-6.1/nfsd-clean-up-nfs4_preprocess_stateid_op-call-sites.patch queue-6.1/nfsd-don-t-destroy-global-nfs4_file-table-in-per-net-shutdown.patch queue-6.1/nfsd-use-only-rq_dropme-to-signal-the-need-to-drop-a-reply.patch queue-6.1/nfsd-use-locks_inode_context-helper.patch queue-6.1/nfsd-use-struct_size-helper-in-alloc_session.patch queue-6.1/nfsd-fix-up-the-filecache-laundrette-scheduling.patch queue-6.1/nfsd-move-nfserrno-to-vfs.c.patch queue-6.1/nfsd-use-const-pointers-as-parameters-to-fh_-helpers.patch queue-6.1/nfsd-use-rhashtable-for-managing-nfs4_file-objects.patch queue-6.1/nfsd-clean-up-nfsd4_init_file.patch queue-6.1/nfsd-add-a-nfsd4_file_hash_remove-helper.patch queue-6.1/nfsd-trace-delegation-revocations.patch queue-6.1/nfsd-allow-disabling-nfsv2-at-compile-time.patch queue-6.1/nfsd-flesh-out-a-documenting-comment-for-filecache.c.patch queue-6.1/nfsd-replace-delayed_work-with-work_struct-for-nfsd_client_shrinker.patch queue-6.1/lockd-set-missing-fl_flags-field-when-retrieving-args.patch queue-6.1/filelock-add-a-new-locks_inode_context-accessor-function.patch queue-6.1/lockd-fix-file-selection-in-nlmsvc_cancel_blocked.patch queue-6.1/nfsd-avoid-clashing-function-prototypes.patch