[PATCH v3] nvmet-tcp: reject H2CData before ICReq

Maurizio Lombardi mlombard at bsdbackstore.eu
Tue Jan 27 06:37:09 PST 2026


On Tue Jan 27, 2026 at 2:59 PM CET, Maurizio Lombardi wrote:
> On Mon Jan 26, 2026 at 7:41 AM CET, YunJe Shin wrote:
>> If H2CData arrives before ICReq/CONNECT, queue->connect is used but its
>> iov is not initialized yet, which can lead to a NULL dereference when
>> building the PDU iovec. Reject such requests early with -EPROTO.
>
> Doesn't nvmet_tcp_done_recv_pdu() reject all unexpected PDUs
> when the queue is in connecting state?

Nevermind, now I get what you mean: you can hit the bug if you send
H2CData after ICReq but before the execution
of the connect command.

Maurizio




More information about the Linux-nvme mailing list