[ciqcbr7_9] smb: client: reject userspace cifs.spnego descriptions

[ciq-kernel-automation]

Summary

This PR has been automatically created after successful completion of all CI stages.

Commit Message(s)

smb: client: reject userspace cifs.spnego descriptions

cve CVE-Pending
commit-author Asim Viladi Oglu Manizada <manizada@pm.me>
commit 3da1fdf4efbc490041eb4f836bf596201203f8f2
upstream-diff |
  File path: upstream uses fs/smb/client/cifs_spnego.c, this branch
  uses fs/cifs/cifs_spnego.c. Code is identical.

Test Results

✅ Build Stage

• Status: Passed (x86_64)

• Build Time: 13m 10s

• Total Time: 14m 15s

• View build logs

✅ Boot Verification

• Status: Passed (x86_64)
• View boot logs

---

🤖 This PR was automatically generated by GitHub Actions
Run ID: 26461899187

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/26444068764

[github-actions]

🔍 Interdiff Analysis

• ⚠️ PR commit 08ac144b7273 (smb: client: reject userspace cifs.spnego descriptions) → upstream 3da1fdf4efbc
  Differences found:

================================================================================
*    CONTEXT DIFFERENCES - surrounding code differences between the patches    *
================================================================================

--- b/fs/cifs/cifs_spnego.c
+++ b/fs/smb/client/cifs_spnego.c
@@ -49,4 +37,4 @@
-	kfree(key->payload.data);
+	kfree(key->payload.data[0]);
 }
 
 
@@ -67,3 +49,2 @@
 	.instantiate	= cifs_spnego_key_instantiate,
-	.match		= user_match,
 	.destroy	= cifs_spnego_key_destroy,

This is an automated interdiff check for backported commits.

[github-actions]

JIRA PR Check Results

1 commit(s) with issues found:

Commit 08ac144b7273

Summary: smb: client: reject userspace cifs.spnego descriptions

❌ Errors:

• VULN-: Failed to retrieve ticket: JiraError HTTP 404 url: https://ciqinc.atlassian.net/rest/api/2/issue/VULN-
  text: Issue does not exist or you do not have permission to see it.

  response headers = {'Content-Type': 'application/json;charset=UTF-8', 'Transfer-Encoding': 'chunked', 'Connection': 'keep-alive', 'Date': 'Tue, 26 May 2026 09:28:51 GMT', 'Server': 'AtlassianEdge', 'Timing-Allow-Origin': '*', 'X-Arequestid': '4a7045f727dd769b754726d0d677588b', 'X-Aaccountid': '712020%3A43f5a558-0b78-4cc1-ad9e-a61d9b0317de', 'Cache-Control': 'no-cache, no-store, no-transform', 'Ratelimit-Policy': '"jira-burst-based";q=150;w=1', 'Ratelimit': '"jira-burst-based";r=399;t=1', 'X-Ratelimit-Limit': '400', 'X-Ratelimit-Remaining': '399', 'Content-Encoding': 'gzip', 'X-Content-Type-Options': 'nosniff', 'X-Xss-Protection': '1; mode=block', 'Atl-Traceid': 'b5662215fecc421f82886fcfa52a25ab', 'Atl-Request-Id': 'b5662215-fecc-421f-8288-6fcfa52a25ab', 'Strict-Transport-Security': 'max-age=63072000; includeSubDomains; preload', 'Report-To': '{"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}', 'Nel': '{"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}', 'Server-Timing': 'atl-edge;dur=50,atl-edge-internal;dur=13,atl-edge-upstream;dur=37,atl-edge-pop;desc="aws-us-west-2"', 'X-Cache': 'Error from cloudfront', 'Via': '1.1 ccb414ab5bdb778a5639e83972f955e6.cloudfront.net (CloudFront)', 'X-Amz-Cf-Pop': 'IAD55-P2', 'X-Amz-Cf-Id': 'nK3oauhI6pnvS1XnU-RGxubBGZrt7gBRZ-94xrDRRwn3OUah3m2ToA=='}
  response text = {"errorMessages":["Issue does not exist or you do not have permission to see it."],"errors":{}}

---

Summary: Checked 1 commit(s) total.

[github-actions]

❌ Validation checks completed with issues View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/26444068764

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/26462460320

[github-actions]

🔍 Interdiff Analysis

• ⚠️ PR commit 3fd32bc13bd3 (smb: client: reject userspace cifs.spnego descriptions) → upstream 3da1fdf4efbc
  Differences found:

================================================================================
*    CONTEXT DIFFERENCES - surrounding code differences between the patches    *
================================================================================

--- b/fs/cifs/cifs_spnego.c
+++ b/fs/smb/client/cifs_spnego.c
@@ -49,4 +37,4 @@
-	kfree(key->payload.data);
+	kfree(key->payload.data[0]);
 }
 
 
@@ -67,3 +49,2 @@
 	.instantiate	= cifs_spnego_key_instantiate,
-	.match		= user_match,
 	.destroy	= cifs_spnego_key_destroy,

This is an automated interdiff check for backported commits.

[github-actions]

✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/26462460320

[bmastbergen]

🥌