[PATCH] nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

Keith Busch kbusch at kernel.org
Tue Jul 28 14:07:50 PDT 2026


On Mon, Jul 20, 2026 at 02:03:05PM +0800, Yang Xiuwei wrote:
> Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls
> nvme_cmd_allowed(). Unprivileged callers can thus issue I/O on a
> partition device or write through a read-only file descriptor.

Thanks, applied to nvme-7.3.



More information about the Linux-nvme mailing list