[PATCH v3] nvmet-tcp: reject H2CData before ICReq

Maurizio Lombardi mlombard at bsdbackstore.eu
Tue Jan 27 05:59:08 PST 2026


On Mon Jan 26, 2026 at 7:41 AM CET, YunJe Shin wrote:
> If H2CData arrives before ICReq/CONNECT, queue->connect is used but its
> iov is not initialized yet, which can lead to a NULL dereference when
> building the PDU iovec. Reject such requests early with -EPROTO.

Is it actually reproducible?

Doesn't nvmet_tcp_done_recv_pdu() reject all unexpected PDUs
when the queue is in connecting state?

Maurizio




More information about the Linux-nvme mailing list