Please pull RDMA subsystem changes
Jason Gunthorpe
maintainerHi Linus,
Some more security bugs probably found by AI. I think there will be another batch of these still to come this cycle.
Jason
The following changes since commit 5d6919055dec134de3c40167a490f33c74c12581:
Linux 7.1-rc3 (2026-05-10 14:08:09 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma.git tags/for-linus
for you to fetch changes up to 5b74373390113fba798a76b483837029ab010fef:
RDMA/rtrs: Fix use-after-free in path file creation cleanup (2026-05-19 19:32:48 -0300)
----------------------------------------------------------------
RDMA v7.1 first rc window
- syzbot triggred crash in rxe due to concurrent plug/unplug
- Possible non-zero'd memory exposed to userspace in bnxt_re
- Malicous 'magic packet' with SIW causes a buffer overflow
- Tighten the new uAPI validation code to not crash in debugging prints and have the right module dependencies in drivers
- mana was missing the max_msg_sz report to userspace
- UAF in rtrs on an error path
----------------------------------------------------------------
Edward Adam Davis (1):
RDMA/nldev: Add mutual exclusion in nldev_dellink()
Guangshuo Li (1):
RDMA/rtrs: Fix use-after-free in path file creation cleanup
Jason Gunthorpe (2):
RDMA/core: Move the _ib_copy_validate_udata* functions to ib_core_uverbs RDMA/core: Do not read wild stack memory in uverbs_get_handler_fn()
Lord Ulf Henrik Holmberg (1):
RDMA/bnxt_re: zero shared page before exposing to userspace
Michael Bommarito (1):
RDMA/siw: Reject MPA FPDU length underflow before signed receive math
Shiraz Saleem (1):
RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port
Yi Lai (1):
selftests/rdma: explicitly skip tests when required modules are missing
drivers/infiniband/core/ib_core_uverbs.c | 87 ++++++++++++ drivers/infiniband/core/nldev.c | 3 + drivers/infiniband/core/uverbs.h | 34 +++++ drivers/infiniband/core/uverbs_ioctl.c | 148 ++------------------- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 2 +- drivers/infiniband/hw/mana/main.c | 1 + drivers/infiniband/sw/siw/siw_qp_rx.c | 15 +++ drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +- include/rdma/uverbs_ioctl.h | 1 + tools/testing/selftests/rdma/rxe_ipv6.sh | 6 +- .../selftests/rdma/rxe_rping_between_netns.sh | 7 + .../selftests/rdma/rxe_socket_with_netns.sh | 6 + .../selftests/rdma/rxe_test_NETDEV_UNREGISTER.sh | 6 +- 13 files changed, 178 insertions(+), 140 deletions(-)
The pull request you sent on Fri, 22 May 2026 20:44:24 -0300:
The pull request you sent on Fri, 22 May 2026 20:44:24 -0300:
Quoted 1 line
git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma.gittags/for-linus
has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/ab868c10971c5d2cd27b3709d11225941eabe78e
Thank you!
Signature · 2 lines
Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/prtracker.html