In some rare and specific circumstances on a few systems, data corruption can occur when using NET_DMA. In these cases, a call to dma_skb_copy_datagram_iovec() to perform the DMA, which ultimately calls into the iotdma driver, does not deliver the data to the expected location. The issue is that get_user_pages() does not prevent the kernel from faulting in a new page.

This bug has exis...