nvme fixes for Linux 7.3

- Fix use-after-free of the command effects log on multipath heads
  - Fix target namespace disable race with in-flight I/O and attribute
    changes
  - Fix out-of-bounds write in in-band authentication
  - Fix out-of-bounds reads parsing SGL segments and ANA logs
  - Fix zoned limits on multipath heads when the zone info query fails
  - Fix reservation preempt and abort matching against a nil host id
  - Fix lockdep key lifetime by reverting the per-socket dynamic keys and
    delaying socket reclassification past the TLS handshake
  - Fix controller reset and delete races that trigger spurious warnings
  - Add a dma pool alignment quirk for the Micron 4100AT
  - Preserve the target namespace device path on allocation failure
  - Fix -Wformat-security build warnings
 -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE3Fbyvv+648XNRdHTPe3zGtjzRgkFAmq2kJIACgkQPe3zGtjz
 RgnC1g//V6xlNgADNhBp7dsiJCktIsOZxkrG6UIFOQ6VYT8LEZlFvlcKbdmbL9de
 yCerLOOdE4QsmL/sXwIWDuofgKDll3Wh2BLJXguLKp+04w9hx/YCvBPlIBTNMy7y
 oNlZDmc3YyCj+KQnqTeSH5mitg4Pdva8cB2JF7vPcJyXohbfp/15/VfCWxJwrZgc
 t/YJSniEGEH9XwzRQJo898L6kBFP+vUjEG6q9MzxTwSY2BeJ6phoJznMgaNo3ryX
 8NybhpDXOs/C5N+4CcrU8z+diaQp+P0GH6CU3bcu7FD+NpDsVT8Sw3T15jFAP2iz
 ET0PtJXFZcD66lcctU7mu+XaGugp6aO33MntKP9W0ou7iwEY9x7LgaY3JUxJYcR8
 jVn4tZtj+SP8UL2SDjKrh6C26Vnbj5GvJIsohTST2ALGrhWqLdGiJJqyrfF4i7ed
 qYSC5mITha9EwaMlawqicu5p9mT850placGmsutzYR+UDdh/WJ2hdKm5NCfzDEHH
 sXTtKGKcAiCWcKgmNZ3XugZTnU2EXo843cnP8SONoVSftsLf7O268QKmwV3Bof/8
 q/vYSmwRLZUymMSRXK5wA68Snsfghx3dMTfjLoetChH/Q1dluhadduLUN98icWFA
 hr6s/4emSDOjSFVe4tgtZOCFT2kSncDIdVWpt5xZZ0heGkMOZUU=
 =crsv
 -----END PGP SIGNATURE-----

Merge tag 'nvme-7.3-2026-09-25' of git://git.infradead.org/nvme into block-7.3

Pull NVMe fixes from Keith:

"- Fix use-after-free of the command effects log on multipath heads
 - Fix target namespace disable race with in-flight I/O and attribute
   changes
 - Fix out-of-bounds write in in-band authentication
 - Fix out-of-bounds reads parsing SGL segments and ANA logs
 - Fix zoned limits on multipath heads when the zone info query fails
 - Fix reservation preempt and abort matching against a nil host id
 - Fix lockdep key lifetime by reverting the per-socket dynamic keys and
   delaying socket reclassification past the TLS handshake
 - Fix controller reset and delete races that trigger spurious warnings
 - Add a dma pool alignment quirk for the Micron 4100AT
 - Preserve the target namespace device path on allocation failure
 - Fix -Wformat-security build warnings"

* tag 'nvme-7.3-2026-09-25' of git://git.infradead.org/nvme:
  nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
  nvme: fix command effects log lifetime for multipath heads
  nvmet: don't allow I/O admission after percpu ns reference is killed
  nvmet: defer setting ns->enabled to false in nvmet_ns_disable()
  nvmet: copy the hostid into the ctrl before creating PR pc_refs
  nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
  nvmet: pci-epf: reject too-short SGL segments
  nvme-multipath: fix underflow in ANA log bounds checks
  nvme: work around all -Wformat-security warnings
  nvme: work around -Wformat-security warning
  nvme: do not reset controllers in NVME_CTRL_NEW state
  nvme-tcp: delay nvme_tcp_reclassify_socket()
  Revert "nvme-tcp: lockdep: use dynamic lockdep keys per socket instance"
  nvmet: preserve device path on allocation failure
  nvme-fc: do not warn on controller removal race
  nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT
This commit is contained in:
Jens Axboe 2026-09-28 07:47:39 -06:00
commit 102cf59199
12 changed files with 91 additions and 96 deletions