Commit f14572c203d5 for kernel

commit f14572c203d57492e1d4e5d7851a3b143e083b82
Merge: aa98230e410f e66cf1625ec4
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 25 13:30:04 2026 -0700

    Merge tag 'cifs-fixes-7.3-rc5' of https://git.manguebit.org/linux

    Pull smb client fixes from Paulo Alcantara:

     - Fix leaked server handles and dropped errors in the SMB2 compound
       create path: a parsing error reported as success, an earlier CREATE
       left open when a later command fails, the cached directory open
       losing the FID needed for cleanup, and SMB2_open() not closing the
       handle after a create-context parse failure

     - Fix out-of-bounds reads when parsing create contexts from a
       malicious server: bound each context by its Next field, parse the
       lease and QFid contexts from their declared offsets and validate
       the POSIX create context length

     - Fix a double credit decrement, and its warning, when a compound
       send fails and triggers a reconnect; found by syzbot

     - Fix a dentry and server handle leak in cifs_atomic_open() when an
       O_CREAT open resolves to a symlink or other non-regular inode

     - Use GFP_KERNEL in the DFS get_targets() path

     - Minor update to the POSIX extension specification references

    * tag 'cifs-fixes-7.3-rc5' of https://git.manguebit.org/linux:
      smb: client: use finish_no_open() for non-regular inodes
      smb: client: use GFP_KERNEL in get_targets()
      smb: client: update POSIX extension specification references
      smb: client: preserve create-context parsing errors
      smb: client: close completed creates on compound wait errors
      smb: client: clean up failed cached directory opens
      smb: client: close handle after create-context parsing failure
      smb: client: validate POSIX create context length
      smb: client: fix create context out-of-bounds reads
      smb: client: delete compound mids on send failure before unlock