Two lock requests on the kernel SMB server could free the same memory
Brief
This is not the login or control-reply overflows.
Notes
29f74f0f2e6d (Ilan Dudnik) landed via ksmbd-for-7.3-rc1. Lock-list use-after-free / double free. Fixes ancestor e2f34481b24d. No Cc:stable.
Not the short-packet read.
Commit 29f74f0f2e6df3b393b7b66e810136d0c64e3c59