[ciqlts9_4] Multiple patches tested (6 commits)

[ciq-kernel-automation]

Summary

This PR has been automatically created after successful completion of all CI stages.

Commit Message(s)

mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

jira VULN-173889
cve CVE-2025-68800
commit-author Ido Schimmel <idosch@nvidia.com>
commit 8ac1dacec458f55f871f7153242ed6ab60373b90

mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure

jira VULN-176247
cve CVE-2026-23144
commit-author SeongJae Park <sj@kernel.org>
commit 9814cc832b88bd040fc2a1817c2b5469d0f7e862

scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

jira VULN-176314
cve CVE-2026-23193
commit-author Maurizio Lombardi <mlombard@redhat.com>
commit 84dc6037390b8607c5551047d3970336cb51ba9a

net: add skb_header_pointer_careful() helper

jira VULN-176130
cve-pre CVE-2026-23204
commit-author Eric Dumazet <edumazet@google.com>
commit 13e00fdc9236bd4d0bff4109d2983171fbcb74c4
upstream-diff |
	Adjusted context because skb_pointer_if_linear does not exist.
	Introduced in 6f5a630d7c57c ("bpf, net: Introduce skb_pointer_if_linear().")

net/sched: cls_u32: use skb_header_pointer_careful()

jira VULN-176130
cve CVE-2026-23204
commit-author Eric Dumazet <edumazet@google.com>
commit cabd1a976375780dabab888784e356f574bbaed8

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

jira VULN-176073
cve CVE-2026-23111
commit-author Andrew Fasano <andrew.fasano@nist.gov>
commit f41c5d151078c5348271ffaf8e7410d96f2d82f8

Test Results

✅ Build Stage

Architecture	Build Time	Total Time
x86_64	27m 8s	28m 6s
aarch64	15m 45s	16m 23s

• View build logs

✅ Boot Verification

• Status: Passed (all architectures)
• View boot logs

✅ Kernel Selftests

Architecture	Passed	Failed	Compared Against	Status
x86_64	188	29	ciqlts9_4	⚠️ No baseline available
aarch64	143	32	ciqlts9_4	⚠️ No baseline available

• View kselftest logs

✅ LTP Results

Architecture	Passed	Failed	Compared Against	Status
x86_64	1447	81	ciqlts9_4	⚠️ No baseline available
aarch64	1418	82	ciqlts9_4	⚠️ No baseline available

• View LTP logs

---

🤖 This PR was automatically generated by GitHub Actions
Run ID: 25313372878

[github-actions]

🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/25322727013

[github-actions]

🔍 Interdiff Analysis

• ⚠️ PR commit 7fe6806a7f1 (net: add skb_header_pointer_careful() helper) → upstream 13e00fdc9236
  Differences found:

################################################################################
!    REJECTED PATCH2 HUNKS - could not be compared; manual review needed       !
################################################################################

--- b/include/linux/skbuff.h
+++ b/include/linux/skbuff.h
@@ -4301,6 +4301,18 @@
 				    skb_headlen(skb), buffer);
 }
 
+/* Variant of skb_header_pointer() where @offset is user-controlled
+ * and potentially negative.
+ */
+static inline void * __must_check
+skb_header_pointer_careful(const struct sk_buff *skb, int offset,
+			   int len, void *buffer)
+{
+	if (unlikely(offset < 0 && -offset > skb_headroom(skb)))
+		return NULL;
+	return skb_header_pointer(skb, offset, len, buffer);
+}
+
 static inline void * __must_check
 skb_pointer_if_linear(const struct sk_buff *skb, int offset, int len)
 {

================================================================================
*    CONTEXT DIFFERENCES - surrounding code differences between the patches    *
================================================================================

--- b/include/linux/skbuff.h
+++ b/include/linux/skbuff.h
@@ -3930,6 +3930,6 @@
 				    skb_headlen(skb), buffer);
 }
 
-/**
- *	skb_needs_linearize - check if we need to linearize a given skb
- *			      depending on the given device features.
+static inline void * __must_check
+skb_pointer_if_linear(const struct sk_buff *skb, int offset, int len)
+{

• ⚠️ PR commit ff311956de3 (netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()) → upstream f41c5d151078
  Differences found:

================================================================================
*    CONTEXT DIFFERENCES - surrounding code differences between the patches    *
================================================================================

--- b/net/netfilter/nf_tables_api.c
+++ b/net/netfilter/nf_tables_api.c
@@ -5224,7 +5224,7 @@
 
 	list_for_each_entry(catchall, &set->catchall_list, list) {
 		ext = nft_set_elem_ext(set, catchall->elem);
 		if (!nft_set_elem_active(ext, genmask))
 			continue;
 
-		elem.priv = catchall->elem;
+		nft_clear(ctx->net, ext);

This is an automated interdiff check for backported commits.

[github-actions]

✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/25322727013