[PATCH v3] nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()

[Keith Busch]

On Thu, Jul 30, 2026 at 03:18:39PM +0900, Shin'ichiro Kawasaki wrote:
> nvmet_pci_epf_exec_iod_work() submits an I/O command with req->execute()
> and then waits for the command to complete and transfers the data back
> to the host. This wait is not needed for commands that do not transfer
> data from the device to the host. To decide whether that wait is needed,
> it reads iod->data_len and iod->dma_dir after calling req->execute().

Thanks, applied to nvme-7.3.