[PATCH v2 0/2] nvme: fix removing namespaces under SRCU readers

[Keith Busch]

On Wed, 04 Nov 2026 01:30:38 -0500, Qiliang Yuan wrote:
> nvme_remove_namespaces() splices the namespace list with
> list_splice_init_rcu() and synchronize_rcu(), but the list is read
> under SRCU. A reader still on the last namespace can then walk onto the
> on-stack list head, which KASAN reports as a stack-out-of-bounds read.
> 
> Patch 1 adds list_splice_init_srcu() for lists read under SRCU, and
> patch 2 uses it in nvme. Both are needed for the fix.
> 
> [...]

Applied, thanks!

[1/2] srcu: Add list_splice_init_srcu()
      commit: d06917d0ba226206dbd606330d73a8eb1e3029c1
[2/2] nvme: wait for SRCU readers before splicing the namespace list
      commit: 8a0449832b50cd4f99f2d2952cfc1476e5f26d0f

Best regards,
-- 
Keith Busch <kbusch at kernel.org>