Breno Leitao 512db8267b rds: mark snapshot pages dirty in rds_info_getsockopt() ... rds_info_getsockopt() pins the destination user pages with FOLL_WRITE and the RDS_INFO_* producers memcpy the snapshot into them through kmap_atomic(). Because that copy goes through the kernel direct map, the dirty bit on the user PTE is never set, so unpin_user_pages() releases the pages without marking them dirty. A file-backed destination page can then be reclaimed without writeback, silently discarding the copied data. Use unpin_user_pages_dirty_lock() with make_dirty=true so the modified pages are marked dirty before they are unpinned. Fixes: a8c879a7ee ("RDS: Info and stats") Signed-off-by: Breno Leitao <leitao@debian.org> Reviewed-by: Allison Henderson <achender@kernel.org> Link: https://patch.msgid.link/20260608-rds_fix-v1-1-006c88543408@debian.org Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2026-06-10 08:18:16 -07:00
..
6lowpan	6lowpan: fix off-by-one in multicast context address compression	2026-06-01 19:10:16 -07:00
9p	9p/trans_xen: replace simple_strto* with kstrtouint	2026-04-16 02:57:01 +00:00
802	net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr	2026-06-04 08:52:41 -07:00
8021q	8021q: delete cleared egress QoS mappings	2026-04-23 12:13:57 +02:00
appletalk	appletalk: aarp: zero-initialize aarp_entry to prevent heap info leak	2026-06-03 18:08:58 -07:00
atm	net: atm: fix skb leak in sigd_send() default branch	2026-05-12 18:07:02 -07:00
batman-adv	batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface	2026-05-19 10:43:54 +02:00
bluetooth	Bluetooth: MGMT: Fix backward compatibility with userspace	2026-06-03 11:24:12 -04:00
bpf	bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb	2026-04-12 15:42:57 -07:00
bridge	netfilter: bridge: make ebt_snat ARP rewrite writable	2026-06-01 13:43:53 +02:00
can	Networking changes for 7.1.	2026-04-14 18:36:10 -07:00
ceph	libceph: Fix potential null-ptr-deref in decode_choose_args()	2026-05-12 21:00:59 +02:00
core	net: guard timestamp cmsgs to real error queue skbs	2026-06-09 18:32:08 -07:00
dcb
devlink	devlink: Release nested relation on devlink free	2026-06-01 19:54:52 -07:00
dns_resolver
dsa	net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops	2026-04-16 19:10:48 -07:00
ethernet
ethtool	ethtool: eeprom: add more safeties to EEPROM Netlink fallback	2026-05-27 17:42:09 -07:00
handshake	net/handshake: Drain pending requests at net namespace exit	2026-05-28 13:35:32 +02:00
hsr	hsr: Remove WARN_ONCE() in hsr_addr_is_self().	2026-06-02 12:04:52 -07:00
ieee802154	ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()	2026-06-04 08:51:32 -07:00
ife
ipv4	inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush	2026-06-04 18:05:23 -07:00
ipv6	ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()	2026-06-10 08:16:07 -07:00
iucv	net/iucv: fix locking in .getsockopt	2026-05-22 17:40:32 -07:00
kcm
key	xfrm: route MIGRATE notifications to caller's netns	2026-05-07 09:31:10 +02:00
l2tp	l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()	2026-06-01 19:40:46 -07:00
l3mdev
lapb
llc	llc: Return -EINPROGRESS from llc_ui_connect()	2026-04-23 11:40:39 -07:00
mac80211	wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap	2026-06-02 13:26:33 +02:00
mac802154
mctp	net: mctp: test: Use dev_direct_xmit for TX to our test device	2026-04-30 13:36:47 -07:00
mpls
mptcp	mptcp: add-addr: always drop other suboptions	2026-06-03 19:04:27 -07:00
ncsi
netfilter	netfilter: nft_byteorder: remove multi-register support	2026-06-01 13:43:53 +02:00
netlabel	netlabel: validate unlabeled address and mask attribute lengths	2026-06-05 19:05:06 -07:00
netlink	net: netlink: don't set nsid on local notifications	2026-05-22 17:11:09 -07:00
nfc	nfc: hci: fix out-of-bounds read in HCP header parsing	2026-05-07 12:42:09 +02:00
nsh
openvswitch	net: openvswitch: fix possible kfree_skb of ERR_PTR	2026-06-08 20:13:02 -07:00
packet	net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()	2026-04-22 20:16:34 -07:00
phonet	net: phonet: free phonet_device after RCU grace period	2026-06-08 17:37:07 -07:00
psample
psp	psp: strip variable-length PSP header in psp_dev_rcv()	2026-05-04 19:25:14 -07:00
qrtr	net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove	2026-06-08 18:45:38 -07:00
rds	rds: mark snapshot pages dirty in rds_info_getsockopt()	2026-06-10 08:18:16 -07:00
rfkill
rxrpc	rxrpc: Fix the ACK parser to extract the SACK table for parsing	2026-06-09 11:28:17 +02:00
sched	net/sched: fix pedit partial COW leading to page cache corruption	2026-06-04 08:29:02 -07:00
sctp	sctp: validate embedded INIT chunk and address list lengths in cookie	2026-06-09 18:16:51 -07:00
shaper	net: shaper: rework the VALID marking (again)	2026-05-20 16:34:20 -07:00
smc	net/smc: Do not re-initialize smc hashtables	2026-05-22 17:38:02 -07:00
strparser	net: strparser: fix skb_head leak in strp_abort_strp()	2026-04-14 12:37:00 +02:00
sunrpc	nfsd-7.1 fixes:	2026-05-26 13:49:13 -07:00
switchdev
tipc	Including fixes from Netfilter.	2026-04-23 16:50:42 -07:00
tls	tls: Preserve sk_err across recvmsg() when data has been copied	2026-05-14 18:19:44 -07:00
unix	af_unix: Fix inq_len update problem in partial read	2026-06-03 18:52:25 -07:00
vmw_vsock	vsock/vmci: fix sk_ack_backlog leak on failed handshake	2026-06-04 13:08:02 +02:00
wireless	wifi: cfg80211: enforce HE/EHT cap/oper consistency	2026-06-03 13:25:19 +02:00
x25	vfs-7.1-rc1.kino	2026-04-13 12:19:01 -07:00
xdp	xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()	2026-06-03 17:45:42 -07:00
xfrm	xfrm: input: hold netns during deferred transport reinjection	2026-05-26 10:35:30 +02:00
compat.c
devres.c
Kconfig	net: remove ax25 and amateur radio (hamradio) subsystem	2026-04-23 10:24:02 -07:00
Kconfig.debug
Makefile	net: remove ax25 and amateur radio (hamradio) subsystem	2026-04-23 10:24:02 -07:00
socket.c	net: guard timestamp cmsgs to real error queue skbs	2026-06-09 18:32:08 -07:00
sysctl_net.c