linux-imx/drivers/nvme/target
Maurizio Lombardi 489f2913a6 nvmet-tcp: fix kernel crash if commands allocation fails
[ Upstream commit 5572a55a6f ]

If the commands allocation fails in nvmet_tcp_alloc_cmds()
the kernel crashes in nvmet_tcp_release_queue_work() because of
a NULL pointer dereference.

  nvmet: failed to install queue 0 cntlid 1 ret 6
  Unable to handle kernel NULL pointer dereference at
         virtual address 0000000000000008

Fix the bug by setting queue->nr_cmds to zero in case
nvmet_tcp_alloc_cmd() fails.

Fixes: 872d26a391 ("nvmet-tcp: add NVMe over TCP target driver")
Signed-off-by: Maurizio Lombardi <mlombard@redhat.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Keith Busch <kbusch@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-09-12 11:11:44 +02:00
..
admin-cmd.c nvmet: remove nvmet_req_cns_error_complete 2023-04-13 08:55:05 +02:00
auth.c nvmet-auth: fix nvmet_auth hash error handling 2024-08-03 08:53:22 +02:00
configfs.c nvmet: fix ns enable/disable possible hang 2024-06-12 11:12:53 +02:00
core.c nvmet: always initialize cqe.result 2024-07-25 09:50:46 +02:00
discovery.c nvme: move from strlcpy with unused retval to strscpy 2022-09-19 11:33:53 +02:00
fabrics-cmd-auth.c nvmet: always initialize cqe.result 2024-07-25 09:50:46 +02:00
fabrics-cmd.c nvmet: always initialize cqe.result 2024-07-25 09:50:46 +02:00
fc.c nvmet-fc: take ref count on tgtport before delete assoc 2024-03-01 13:34:52 +01:00
fcloop.c nvmet-fcloop: swap the list_add_tail arguments 2024-03-01 13:34:52 +01:00
io-cmd-bdev.c bio-integrity: update the payload size in bio_integrity_add_page() 2023-08-09 16:05:35 -06:00
io-cmd-file.c nvmet: use bvec_set_page to initialize bvecs 2023-02-03 08:20:55 -07:00
Kconfig nvmet-auth: select the intended CRYPTO_DH_RFC7919_GROUPS 2022-08-02 17:22:51 -06:00
loop.c nvmet: use PAGE_SECTORS_SHIFT 2023-07-10 08:46:30 -07:00
Makefile nvmet: implement basic In-Band Authentication 2022-08-02 17:14:49 -06:00
nvmet.h nvmet: fix nvme status code when namespace is disabled 2024-06-12 11:11:30 +02:00
passthru.c nvmet-passthru: propagate status from id override functions 2024-06-21 14:38:35 +02:00
rdma.c nvmet-rdma: fix possible bad dereference when freeing rsps 2024-08-29 17:33:40 +02:00
tcp.c nvmet-tcp: fix kernel crash if commands allocation fails 2024-09-12 11:11:44 +02:00
trace.c nvmet-trace: avoid dereferencing pointer too early 2024-08-29 17:33:32 +02:00
trace.h nvmet-trace: avoid dereferencing pointer too early 2024-08-29 17:33:32 +02:00
zns.c nvmet: rename nvmet_execute_identify_cns_cs_ns 2023-04-13 08:55:04 +02:00