The following changes since commit 81cc5f39aa3042e9c0b2ea772b42a2c8b1488e76:

  Merge tag 'pull-target-arm-20260529' of https://gitlab.com/pm215/qemu into staging (2026-05-29 12:58:25 -0400)

are available in the Git repository at:

  https://github.com/cschoenebeck/qemu.git tags/pull-9p-20260601

for you to fetch changes up to 5a8da7e979f1f56b1cab82c2354833f309f1a78f:

  9pfs: fix missing rename lock in v9fs_co_readdir_many (CVE-2026-48004) (2026-06-01 11:11:39 +0200)

----------------------------------------------------------------
9pfs changes:

- fix V9fsPath heap buffer overflow (gitlab #3358)

- fix missing rename lock in v9fs_co_readdir_many (CVE-2026-48004)

----------------------------------------------------------------
Christian Schoenebeck (6):
      hw/9pfs: add NULL check in v9fs_path_is_ancestor()
      hw/9pfs: change V9fsPath.size to size_t and v9fs_path_sprintf() return type
      hw/9pfs: add error handling to v9fs_fix_path()
      hw/9pfs: let callers of v9fs_path_sprintf() and v9fs_fix_path() handle errors
      tests/qtest/libqos: add qvirtqueue_reset_pool() for descriptor pool reset
      tests/9pfs: add deep absolute path test

sin99xx (1):
      9pfs: fix missing rename lock in v9fs_co_readdir_many (CVE-2026-48004)

 fsdev/file-op-9p.h           |  2 +-
 hw/9pfs/9p-local.c           | 23 ++++++++++-----
 hw/9pfs/9p.c                 | 41 +++++++++++++++++++-------
 hw/9pfs/9p.h                 |  4 +--
 hw/9pfs/codir.c              |  3 ++
 tests/qtest/libqos/virtio.c  | 23 +++++++++++++++
 tests/qtest/libqos/virtio.h  |  2 ++
 tests/qtest/virtio-9p-test.c | 69 ++++++++++++++++++++++++++++++++++++++++++++
 8 files changed, 147 insertions(+), 20 deletions(-)

Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/11.1 for any user-visible changes.