]> git.ipfire.org Git - thirdparty/linux.git/commit
nvme-tcp: sanitize request list handling
authorHannes Reinecke <hare@kernel.org>
Wed, 28 May 2025 06:45:33 +0000 (08:45 +0200)
committerChristoph Hellwig <hch@lst.de>
Wed, 4 Jun 2025 08:01:51 +0000 (10:01 +0200)
commit0bf04c874fcb1ae46a863034296e4b33d8fbd66c
tree6acbc244362b9178db6a30687a90bf286d26a7d6
parente7143706702a209c814ed2c3fc6486c2a7decf6c
nvme-tcp: sanitize request list handling

Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of
any list, otherwise a malicious R2T PDU might inject a loop in request
list processing.

Signed-off-by: Hannes Reinecke <hare@kernel.org>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Christoph Hellwig <hch@lst.de>
drivers/nvme/host/tcp.c