Hi Linus,

Accumulated RC bug fixes - seems like a more serious set of bugs this
time.

Thanks,
Jason

The following changes since commit 0bb80ecc33a8fb5a682236443c1e740d5c917d1d:

  Linux 6.6-rc1 (2023-09-10 16:28:41 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma.git tags/for-linus

for you to fetch changes up to c38d23a54445f9a8aa6831fafc9af0496ba02f9e:

  RDMA/core: Require admin capabilities to set system parameters (2023-10-05 20:01:47 +0300)

----------------------------------------------------------------
v6.6 first rc pull request

This includes a fix for a significant security miss in checking the
RDMA_NLDEV_CMD_SYS_SET operation.

- UAF in SRP

- Error unwind failure in siw connection management

- Missing error checks

- NULL/ERR_PTR confusion in erdma

- Possible string truncation in CMA configfs and mlx4

- Data ordering issue in bnxt_re

- Missing stats decrement on object destroy in bnxt_re

- Mlx5 bugs in this merge window:
  * Incorrect access_flag in the new mkey cache
  * Missing unlock on error in flow steering
  * lockdep possible deadlock on new mkey cache destruction
    Plus a fix for this too

- Don't leak kernel stack memory to userspace in the CM

- Missing permission validation for RDMA_NLDEV_CMD_SYS_SET

----------------------------------------------------------------
Artem Chernyshev (1):
      RDMA/cxgb4: Check skb value for failure to allocate

Bart Van Assche (1):
      RDMA/srp: Do not call scsi_done() from srp_abort()

Bernard Metzler (1):
      RDMA/siw: Fix connection failure handling

Cheng Xu (1):
      RDMA/erdma: Fix NULL pointer access in regmr_cmd

Christophe JAILLET (1):
      IB/mlx4: Fix the size of a buffer in add_port_entries()

Dan Carpenter (1):
      RDMA/erdma: Fix error code in erdma_create_scatter_mtt()

Hamdan Igbaria (1):
      RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation

Konstantin Meskhidze (1):
      RDMA/uverbs: Fix typo of sizeof argument

Leon Romanovsky (3):
      RDMA/cma: Fix truncation compilation warning in make_cma_ports
      RDMA/mlx5: Remove not-used cache disable flag
      RDMA/core: Require admin capabilities to set system parameters

Mark Zhang (1):
      RDMA/cma: Initialize ib_sa_multicast structure to 0 when join

Michael Guralnik (1):
      RDMA/mlx5: Fix assigning access flags to cache mkeys

Selvin Xavier (2):
      RDMA/bnxt_re: Fix the handling of control path response data
      RDMA/bnxt_re: Decrement resource stats correctly

Shay Drory (2):
      RDMA/mlx5: Fix NULL string error
      RDMA/mlx5: Fix mkey cache possible deadlock on cleanup

 drivers/infiniband/core/cma.c              |  2 +-
 drivers/infiniband/core/cma_configfs.c     |  2 +-
 drivers/infiniband/core/nldev.c            |  1 +
 drivers/infiniband/core/uverbs_main.c      |  2 +-
 drivers/infiniband/hw/bnxt_re/ib_verbs.c   |  4 ++++
 drivers/infiniband/hw/bnxt_re/qplib_rcfw.c | 11 +++++++++--
 drivers/infiniband/hw/cxgb4/cm.c           |  3 +++
 drivers/infiniband/hw/erdma/erdma_verbs.c  |  7 +++----
 drivers/infiniband/hw/mlx4/sysfs.c         |  2 +-
 drivers/infiniband/hw/mlx5/fs.c            |  2 +-
 drivers/infiniband/hw/mlx5/main.c          |  2 +-
 drivers/infiniband/hw/mlx5/mr.c            | 14 +++++++++++---
 drivers/infiniband/sw/siw/siw_cm.c         | 16 ++++++++++++----
 drivers/infiniband/ulp/srp/ib_srp.c        | 16 +++++-----------
 14 files changed, 54 insertions(+), 30 deletions(-)