[GIT PULL] Please pull RDMA subsystem changes

[Jason Gunthorpe]

Hi Linus,

Some more security bugs probably found by AI. I think there will be
another batch of these still to come this cycle.

Jason

The following changes since commit 5d6919055dec134de3c40167a490f33c74c12581:

  Linux 7.1-rc3 (2026-05-10 14:08:09 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma.git tags/for-linus

for you to fetch changes up to 5b74373390113fba798a76b483837029ab010fef:

  RDMA/rtrs: Fix use-after-free in path file creation cleanup (2026-05-19 19:32:48 -0300)

----------------------------------------------------------------
RDMA v7.1 first rc window

- syzbot triggred crash in rxe due to concurrent plug/unplug

- Possible non-zero'd memory exposed to userspace in bnxt_re

- Malicous 'magic packet' with SIW causes a buffer overflow

- Tighten the new uAPI validation code to not crash in debugging prints
  and have the right module dependencies in drivers

- mana was missing the max_msg_sz report to userspace

- UAF in rtrs on an error path

----------------------------------------------------------------
Edward Adam Davis (1):
      RDMA/nldev: Add mutual exclusion in nldev_dellink()

Guangshuo Li (1):
      RDMA/rtrs: Fix use-after-free in path file creation cleanup

Jason Gunthorpe (2):
      RDMA/core: Move the _ib_copy_validate_udata* functions to ib_core_uverbs
      RDMA/core: Do not read wild stack memory in uverbs_get_handler_fn()

Lord Ulf Henrik Holmberg (1):
      RDMA/bnxt_re: zero shared page before exposing to userspace

Michael Bommarito (1):
      RDMA/siw: Reject MPA FPDU length underflow before signed receive math

Shiraz Saleem (1):
      RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port

Yi Lai (1):
      selftests/rdma: explicitly skip tests when required modules are missing

 drivers/infiniband/core/ib_core_uverbs.c           |  87 ++++++++++++
 drivers/infiniband/core/nldev.c                    |   3 +
 drivers/infiniband/core/uverbs.h                   |  34 +++++
 drivers/infiniband/core/uverbs_ioctl.c             | 148 ++-------------------
 drivers/infiniband/hw/bnxt_re/ib_verbs.c           |   2 +-
 drivers/infiniband/hw/mana/main.c                  |   1 +
 drivers/infiniband/sw/siw/siw_qp_rx.c              |  15 +++
 drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c       |   2 +-
 include/rdma/uverbs_ioctl.h                        |   1 +
 tools/testing/selftests/rdma/rxe_ipv6.sh           |   6 +-
 .../selftests/rdma/rxe_rping_between_netns.sh      |   7 +
 .../selftests/rdma/rxe_socket_with_netns.sh        |   6 +
 .../selftests/rdma/rxe_test_NETDEV_UNREGISTER.sh   |   6 +-
 13 files changed, 178 insertions(+), 140 deletions(-)

Attachment: signature.asc
Description: PGP signature