[PATCH] nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()

Keith Busch kbusch at kernel.org
Mon Aug 10 15:55:34 PDT 2026


On Tue, Aug 04, 2026 at 11:36:05AM +0800, Guixin Liu wrote:
> When a host issues an Identify command with CNS 05h (I/O Command Set
> specific Identify Namespace) and CSI 02h (ZNS) targeting a file-backed
> namespace, nvmet_execute_identify_ns_zns() calls bdev_is_zoned() on
> req->ns->bdev. A file-backed namespace has no block device, so
> req->ns->bdev is NULL and bdev_is_zoned() dereferences it, oopsing.

Thanks, applied to nvme-7.3.



More information about the Linux-nvme mailing list