[PATCH 5.10 v2 0/2] xprtrdma: Fix bcall rep leak and unbounded peek

[Mikhail Dmitrichenko]

This is a backport of the fix for CVE-2026-72466 to 5.10.y.

Patch 2 does not apply to 5.10 on its own: rpcrdma_is_bcall() there
still has the out_short label that commit 84dff5eb86ce ("rpcrdma: Fix
comments about reverse-direction operation") replaced with a direct
return in v5.12. Patch 1 takes that commit as a prerequisite. Apart
from comment rewording it only drops the pr_warn() on the short call
path, and with it in place patch 2 applies as is.

Changes in v2:
- take 84dff5eb86ce as a prerequisite instead of removing the
  out_short label as part of the fix itself

v1: https://lore.kernel.org/all/20261022115004.1615-1-mdmitrichenko@xxxxxxxxxxxxx/

Chris Mason (1):
  xprtrdma: Fix bcall rep leak and unbounded peek

Chuck Lever (1):
  rpcrdma: Fix comments about reverse-direction operation

 net/sunrpc/xprtrdma/backchannel.c          | 4 ++--
 net/sunrpc/xprtrdma/rpc_rdma.c             | 8 +++-----
 net/sunrpc/xprtrdma/svc_rdma_backchannel.c | 4 ++--
 net/sunrpc/xprtrdma/xprt_rdma.h            | 6 +++---
 4 files changed, 10 insertions(+), 12 deletions(-)

-- 
2.43.0