[ciqlts9_2] smb: client: reject userspace cifs.spnego descriptions

[ciq-kernel-automation]

Summary

This PR has been automatically created after successful completion of all CI stages.

Commit Message(s)

smb: client: reject userspace cifs.spnego descriptions

cve CVE-Pending
commit-author Asim Viladi Oglu Manizada <manizada@pm.me>
commit 3da1fdf4efbc490041eb4f836bf596201203f8f2
upstream-diff |
  File path: upstream uses fs/smb/client/cifs_spnego.c, this branch
  uses fs/cifs/cifs_spnego.c. Code is identical.

Test Results

✅ Build Stage

Architecture	Build Time	Total Time
x86_64	23m 7s	23m 55s
aarch64	12m 51s	13m 24s

• View build logs

✅ Boot Verification

• Status: Passed (all architectures)
• View boot logs

✅ Kernel Selftests

Architecture	Passed	Failed	Compared Against	Status
x86_64	175	23	ciqlts9_2	⚠️ No baseline available
aarch64	140	28	ciqlts9_2	⚠️ No baseline available

• View kselftest logs

✅ LTP Results

Architecture	Passed	Failed	Compared Against	Status
x86_64	1439	81	ciqlts9_2	⚠️ No baseline available
aarch64	1408	84	ciqlts9_2	⚠️ No baseline available

• View LTP logs

---

🤖 This PR was automatically generated by GitHub Actions
Run ID: 26462067310

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/26449518903

[github-actions]

JIRA PR Check Results

1 commit(s) with issues found:

Commit 95d57510e0c4

Summary: smb: client: reject userspace cifs.spnego descriptions

❌ Errors:

• VULN-: Failed to retrieve ticket: JiraError HTTP 404 url: https://ciqinc.atlassian.net/rest/api/2/issue/VULN-
  text: Issue does not exist or you do not have permission to see it.

  response headers = {'Content-Type': 'application/json;charset=UTF-8', 'Transfer-Encoding': 'chunked', 'Connection': 'keep-alive', 'Date': 'Tue, 26 May 2026 13:02:56 GMT', 'Server': 'AtlassianEdge', 'Timing-Allow-Origin': '*', 'X-Arequestid': '7ecaa2943cbf590e0096ea2c83dd57a4', 'X-Aaccountid': '712020%3A43f5a558-0b78-4cc1-ad9e-a61d9b0317de', 'Cache-Control': 'no-cache, no-store, no-transform', 'Ratelimit-Policy': '"jira-burst-based";q=150;w=1', 'Ratelimit': '"jira-burst-based";r=399;t=1', 'X-Ratelimit-Limit': '400', 'X-Ratelimit-Remaining': '399', 'Content-Encoding': 'gzip', 'X-Content-Type-Options': 'nosniff', 'X-Xss-Protection': '1; mode=block', 'Atl-Traceid': '453282a5951042f9a8ae3f2cd0e7fc5d', 'Atl-Request-Id': '453282a5-9510-42f9-a8ae-3f2cd0e7fc5d', 'Strict-Transport-Security': 'max-age=63072000; includeSubDomains; preload', 'Report-To': '{"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}', 'Nel': '{"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}', 'Server-Timing': 'atl-edge;dur=85,atl-edge-internal;dur=14,atl-edge-upstream;dur=71,atl-edge-pop;desc="aws-us-west-2"', 'X-Cache': 'Error from cloudfront', 'Via': '1.1 e20259e84d7d881ed453b1f0e4f9a4c6.cloudfront.net (CloudFront)', 'X-Amz-Cf-Pop': 'IAD55-P4', 'X-Amz-Cf-Id': '-N6xvplKyG82Yle067Xw2FXG-25ryK9MqFK7Deuac0oJaEeFB-A_4Q=='}
  response text = {"errorMessages":["Issue does not exist or you do not have permission to see it."],"errors":{}}

---

Summary: Checked 1 commit(s) total.

[github-actions]

❌ Validation checks completed with issues View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/26449518903

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/26462401989

[github-actions]

✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/26462401989

[bmastbergen]

🥌