Second round of NFSD fixes for v7.0-rc

The following changes since commit 364410170ab33f6e7ef0eb2afb12bf89b0feb3a6:

nfsd: report the requested maximum number of threads instead of number running (2026-02-24 10:27:51 -0500)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/cel/linux.git tags/nfsd-7.0-2

for you to fetch changes up to 5133b61aaf437e5f25b1b396b14242a6bb0508e2:

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (2026-03-16 16:58:01 -0400)

----------------------------------------------------------------
nfsd-7.0 fixes:

Issues that need expedient stable backports:
- Fix cache_request leak in cache_release()
- Fix heap overflow in the NFSv4.0 LOCK replay cache
- Hold net reference for the lifetime of /proc/fs/nfs/exports fd
- Defer sub-object cleanup in export "put" callbacks

----------------------------------------------------------------
Chuck Lever (2):
NFSD: Defer sub-object cleanup in export put callbacks
NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd

Jeff Layton (2):
sunrpc: fix cache_request leak in cache_release
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

 fs/nfsd/export.c   | 63 ++++++++++++++++++++++++++++++++++++++++++++++--------
 fs/nfsd/export.h   |  7 ++++--
 fs/nfsd/nfs4xdr.c  |  9 ++++++--
 fs/nfsd/nfsctl.c   | 22 ++++++++++++++++---
 fs/nfsd/state.h    | 17 ++++++++++-----
 net/sunrpc/cache.c | 26 +++++++++++++++++-----
 6 files changed, 118 insertions(+), 26 deletions(-)