[PATCH 0/3] Fix-use-after-free-when-a-port-is-removed

Israel Rukshin israelr at nvidia.com
Wed Oct 6 01:09:42 PDT 2021


Hi all,
This series fixes an issue when a port is removed through configfs.
This issue is a use-after-free bug for any command that dereferences
req->port (like in nvmet_parse_io_cmd) after releasing the port.

The first patch fix the issue after the controller finished the
connection flow and the second and the third patches fix it during
connection creation time at nvmet-rdma and nvmet-tcp drivers.

Israel Rukshin (3):
  nvmet: Fix use-after-free when a port is removed
  nvmet_rdma: Fix use-after-free when a port is removed
  nvmet_tcp: Fix use-after-free when a port is removed

 drivers/nvme/target/configfs.c |  2 ++
 drivers/nvme/target/rdma.c     | 24 ++++++++++++++++++++++++
 drivers/nvme/target/tcp.c      | 16 ++++++++++++++++
 3 files changed, 42 insertions(+)

-- 
2.16.3




More information about the Linux-nvme mailing list