nvme-tcp: sanitize request list handling

Browse source

[ Upstream commit 0bf04c874f ]

Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of
any list, otherwise a malicious R2T PDU might inject a loop in request
list processing.

Signed-off-by: Hannes Reinecke <hare@kernel.org>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Hannes Reinecke 2025-05-28 08:45:33 +02:00 • committed by Greg Kroah-Hartman

parent 7b86ce1670

commit 78a4adcd3f

1 changed files with 14 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

15

drivers/nvme/host/tcp.c

View file