Commit 014b1f730c for qemu.org

commit 014b1f730c0faa08067f8e9b5829e62ea3d4b177
Merge: 1295c1e8f7 fe9e30899f
Author: Richard Henderson <richard.henderson@linaro.org>
Date:   Wed Sep 23 07:36:52 2026 -0700

    Merge tag 'pull-9p-20260923' of https://github.com/cschoenebeck/qemu into staging

    9pfs changes:

    - Fix CVE-2026-93834.

    # -----BEGIN PGP SIGNATURE-----
    #
    # iQJLBAABCgA1FiEEltjREM96+AhPiFkBNMK1h2Wkc5UFAmqzhGYXHHFlbXVfb3Nz
    # QGNydWRlYnl0ZS5jb20ACgkQNMK1h2Wkc5XSSBAAuzbUSgSMLzlA9nmXFC7BPZj/
    # XB7gRXp+pV6GXZyAkDWU12J9KLDo8Tkkw1c6nk111kkhN68ALrtrun5o39Beep+U
    # 27bU8W7sBa2zrsBmpJMSu5vZ5nlcOdYPk79jHF90FmepH7oCS3ia6k2D/dKWVTEj
    # Vk4AZQGs9oSxKl9Jjz2JAlfq0w9jb/stfrxQ34Lkiri+kIJifmzkOwUvPhQ/Nt6h
    # DntBiwLCDpzcrhk/2dmG7Qggqi8M3NXE59uA7PwixqGSEq8oQduuM5esPFlNiu4n
    # f+Hg25WXmYG6yqkVZ7OT2+xoZgB2bn5xWfgvVOynLOKkaBlVRCpPPyHynvHvHqjX
    # 2/gZ5Oh29Slfxx7DAQK1ZYy/5yUbgdQL+Qt62X8K84184CO/m4hYlDv3jL0sUuCp
    # PCaS7hU3UQxRcVfXWgZo+J1G6GuQM3rt38f1VDQUHIvkIIVIEBqyfFhAQ241hs8r
    # ovWKz8o675572ZioQQg5ohnN5BAk8gqw8OH8FgckZp3WatvFeYeqKe0EpiN6kYdJ
    # +W6IfIBSBadajTLRSZeh2y/g8gBAL7pQcD1HpDeSWcZnhKaYgHPVxuOJce+JomSJ
    # A/bjbmF2fWppAy30R06nAwGynPocwyVm79rokX/MyTUQXRhjGvbYMfW0IcMYN2aL
    # BGkek2Vy2YW77I62hbE=
    # =zRMe
    # -----END PGP SIGNATURE-----
    # gpg: Signature made Wed 23 Sep 2026 12:48:54 AM PDT
    # gpg:                using RSA key 96D8D110CF7AF8084F88590134C2B58765A47395
    # gpg:                issuer "qemu_oss@crudebyte.com"
    # gpg: Good signature from "Christian Schoenebeck <qemu_oss@crudebyte.com>" [unknown]
    # gpg: WARNING: The key's User ID is not certified with a trusted signature!
    # gpg:          There is no indication that the signature belongs to the owner.
    # Primary key fingerprint: ECAB 1A45 4014 1413 BA38  4926 30DB 47C3 A012 D5F4
    #      Subkey fingerprint: 96D8 D110 CF7A F808 4F88  5901 34C2 B587 65A4 7395

    * tag 'pull-9p-20260923' of https://github.com/cschoenebeck/qemu:
      hw/9pfs: mutate FID path from main thread only (CVE-2026-93834)

    Signed-off-by: Richard Henderson <richard.henderson@linaro.org>