[GIT PULL] io_uring fixes for 7.0-rc1

[GIT PULL] io_uring fixes for 7.0-rc1

[Jens Axboe]

Hi Linus,

A few fixes did pop up for io_uring since I sent the pull request
earlier in the week, so let's flush those out for the -rc1 release. This
pull request contains:

- A fix for a missing URING_CMD128 opcode check, fixing an issue with
  the SQE mixed mode support introduced in 6.19. Merged late due to
  having multiple dependencies.

- Add sqe->cmd size checking for big SQEs, similar to what we have for
  normal sized SQEs.

- Fix a race condition in zcrx, that leads to a double free.

Please pull!


The following changes since commit 2961f841b025fb234860bac26dfb7fa7cb0fb122:

  Merge tag 'turbostat-2026.02.14' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux (2026-02-17 15:51:14 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux.git tags/io_uring-20260221

for you to fetch changes up to ea129e55c9e06a51a93c3f5ef3e32a6cfa3f8ec7:

  io_uring: Add size check for sqe->cmd (2026-02-19 07:26:26 -0700)

----------------------------------------------------------------
io_uring-20260221

----------------------------------------------------------------
Caleb Sander Mateos (1):
      io_uring: add IORING_OP_URING_CMD128 to opcode checks

Govindarajulu Varadarajan (1):
      io_uring: Add size check for sqe->cmd

Kai Aizen (1):
      io_uring/zcrx: fix user_ref race between scrub and refill paths

 drivers/block/ublk_drv.c     | 12 ++++++++----
 drivers/nvme/host/ioctl.c    |  3 ++-
 fs/fuse/dev_uring.c          |  6 ++++--
 include/linux/io_uring/cmd.h | 15 +++++++++++----
 io_uring/io_uring.h          |  6 ++++++
 io_uring/kbuf.c              |  2 +-
 io_uring/rw.c                |  4 ++--
 io_uring/zcrx.c              | 10 +++++++---
 8 files changed, 41 insertions(+), 17 deletions(-)

-- 
Jens Axboe