Maurizio Lombardi 4387368fd5 nvmet-tcp: fix a crash in nvmet_req_complete() ... [ Upstream commit 0849a5441358cef02586fb2d60f707c0db195628 ] in nvmet_tcp_handle_h2c_data_pdu(), if the host sends a data_offset different from rbytes_done, the driver ends up calling nvmet_req_complete() passing a status error. The problem is that at this point cmd->req is not yet initialized, the kernel will crash after dereferencing a NULL pointer. Fix the bug by replacing the call to nvmet_req_complete() with nvmet_tcp_fatal_error(). Fixes: 872d26a391da ("nvmet-tcp: add NVMe over TCP target driver") Reviewed-by: Keith Busch <kbsuch@kernel.org> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-11-18 12:12:50 +01:00
..
accessibility
acpi	acpi: property: Let args be NULL in __acpi_node_get_property_reference	2024-11-18 12:12:49 +01:00
amba
android	binder: fix race between mmput() and do_exit()	2024-11-18 12:12:45 +01:00
ata	ata: pata_isapnp: Add missing error check for devm_ioport_map()	2024-11-18 12:10:54 +01:00
atm	atm: solos-pci: Fix potential deadlock on &tx_queue_lock	2024-11-18 12:11:48 +01:00
auxdisplay
base	software node: Let args be NULL in software_node_get_reference_args	2024-11-18 12:12:49 +01:00
battery	drivers: battery_v2: sec_battery: export {CURRENT/VOLTAGE}_MAX to sysfs	2024-11-17 17:43:14 +01:00
bcma
block	zram: use copy_page for full page copy	2024-11-17 17:41:38 +01:00
bluetooth	Bluetooth: btmtkuart: fix recv_buf() return value	2024-11-18 12:12:38 +01:00
bts
bus	bus: ti-sysc: Flush posted write only after srst_udelay	2024-11-18 12:12:01 +01:00
cdrom
char	hwrng: geode - fix accessing registers	2024-11-18 11:43:02 +01:00
clk	clk: fixed-rate: add devm_clk_hw_register_fixed_rate	2024-11-18 12:12:43 +01:00
clocksource	clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware	2024-11-18 11:43:12 +01:00
connector
counter	counter: microchip-tcb-capture: Fix the use of internal GCLK logic	2024-11-08 11:25:51 +01:00
cpufreq	cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()	2024-11-18 12:12:24 +01:00
cpuidle
crypto	virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()	2024-11-18 12:12:45 +01:00
dax
dca
devfreq	PM / devfreq: rockchip-dfi: Make pmu regmap mandatory	2024-11-18 11:42:49 +01:00
dio
dma	dmaengine: stm32-mdma: correct desc prep when channel running	2024-11-18 11:43:25 +01:00
dma-buf
edac	EDAC/thunderx: Fix possible out-of-bounds string access	2024-11-18 12:12:19 +01:00
eisa
extcon
fingerprint
firewire	firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards	2024-11-18 12:12:08 +01:00
firmware	firmware: meson_sm: populate platform devices from sm device tree data	2024-11-18 12:12:28 +01:00
fpga
fsi
gnss
gpio	gpiolib: sysfs: Fix error handling on failed export	2024-11-18 12:11:45 +01:00
gpu	gpu/drm/radeon: fix two memleaks in radeon_vm_init	2024-11-18 12:12:41 +01:00
greybus
gud
hid	HID: wacom: Correct behavior when processing some confidence == false touches	2024-11-18 12:12:48 +01:00
hsi
hv
hwmon	hwmon: (acpi_power_meter) Fix 4.29 MW bug	2024-11-18 12:11:41 +01:00
hwspinlock
hwtracing	coresight: etm4x: Fix width of CCITMIN field	2024-11-18 12:12:19 +01:00
i2c	i2c: rk3x: fix potential spinlock recursion on poll	2024-11-18 12:12:17 +01:00
i3c	i3c: master: cdns: Fix reading status register	2024-11-18 11:43:26 +01:00
ide
idle
ifconn
iio	iio: adc: ad9467: fix scale setting	2024-11-18 12:12:49 +01:00
infiniband	IB/iser: Prevent invalidating wrong MR	2024-11-18 12:12:43 +01:00
input	Input: atkbd - use ab83 as id when skipping the getid command	2024-11-18 12:12:44 +01:00
interconnect	interconnect: Treat xlate() returning NULL node as an error	2024-11-18 12:12:00 +01:00
iommu	iommu/arm-smmu-qcom: Add missing GMU entry to match table	2024-11-18 12:12:47 +01:00
ipack
irqchip	irqchip/stm32-exti: add missing DT IRQ flag translation	2024-11-18 10:58:46 +01:00
isdn
kperfmon	Kperfmon: add xyunbound version	2024-06-15 16:28:49 -03:00
kq/mesh
leds	leds: aw2013: Select missing dependency REGMAP_I2C	2024-11-18 12:12:48 +01:00
lightnvm
macintosh
mailbox
mcb	mcb: fix error handling for different scenarios when parsing	2024-11-18 11:43:25 +01:00
md	dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()	2024-11-18 12:12:03 +01:00
media	media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()	2024-11-18 12:12:41 +01:00
memory
memstick
message
mfd	mfd: syscon: Fix null pointer dereference in of_syscon_register()	2024-11-18 12:12:48 +01:00
misc	misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write	2024-11-18 12:11:45 +01:00
mmc	mmc: sdhci_omap: Fix TI SoC dependencies	2024-11-18 12:12:43 +01:00
most
mtd	mtd: Fix gluebi NULL pointer dereference caused by ftl notifier	2024-11-18 12:12:25 +01:00
muic
mux
net	wifi: mwifiex: configure BSSID consistently when starting AP	2024-11-18 12:12:48 +01:00
nfc	drivers/nfc_logger: Fix implicit int	2024-06-15 16:28:48 -03:00
ntb
nubus
nvdimm	nd_btt: Make BTT lanes preemptible	2024-11-18 11:43:03 +01:00
nvme	nvmet-tcp: fix a crash in nvmet_req_complete()	2024-11-18 12:12:50 +01:00
nvmem	nvmem: imx: correct nregs for i.MX6UL	2024-11-18 10:58:31 +01:00
of	of: unittest: Fix of_count_phandle_with_args() expected value message	2024-11-18 12:12:43 +01:00
opp
oprofile
parisc
parport	parport: parport_serial: Add Brainboxes device IDs and geometry	2024-11-18 12:12:19 +01:00
pci	PCI: Add ACS quirk for more Zhaoxin Root Ports	2024-11-18 12:12:19 +01:00
pcmcia	pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()	2024-11-18 11:43:06 +01:00
perf	perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7	2024-11-08 11:24:52 +01:00
phy	phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins	2024-11-08 11:26:20 +01:00
pinctrl	pinctrl: lochnagar: Don't build on MIPS	2024-11-18 12:12:11 +01:00
platform	platform/x86: intel_telemetry: Fix kernel doc descriptions	2024-11-18 12:11:56 +01:00
pnp
power	power: supply: cw2015: correct time_to_empty units in sysfs	2024-11-18 12:12:49 +01:00
powercap
pps
ps3
ptp	ptp: annotate data-race around q->head and q->tail	2024-11-18 11:43:19 +01:00
pwm	pwm: jz4740: Don't use dev_err_probe() in .request()	2024-11-18 12:12:47 +01:00
rapidio
ras
regulator	regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()"	2024-11-08 11:26:17 +01:00
remoteproc
reset	reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning	2024-11-18 12:12:16 +01:00
rpmsg	rpmsg: Fix possible refcount leak in rpmsg_register_device_override()	2024-11-18 10:58:46 +01:00
rtc	rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call	2024-11-18 11:43:06 +01:00
s390	s390/scm: fix virtual vs physical address confusion	2024-11-18 12:12:16 +01:00
samsung	Fix clang 16 errors treewide	2024-06-15 16:28:48 -03:00
sbus
scsi	scsi: hisi_sas: Replace with standard error code return value	2024-11-18 12:12:36 +01:00
sensorhub	treewide: fix build errors	2024-06-15 16:21:17 -03:00
sensors
sfi
sh
siox
slimbus
soc	soc: qcom: llcc: Handle a second device without data corruption	2024-11-18 11:43:02 +01:00
soundwire	soundwire: stream: fix NULL pointer dereference for multi_link	2024-11-18 12:11:57 +01:00
spi	spi: sh-msiof: Enforce fixed DTDL for R-Car H3	2024-11-18 12:12:25 +01:00
spmi
spu_verify
ssb
staging	media: rkisp1: Disable runtime PM in probe error path	2024-11-18 12:12:40 +01:00
sti
target
tc
tee	tee: optee: Fix supplicant based device enumeration	2024-11-18 12:11:39 +01:00
thermal	thermal: core: prevent potential string overflow	2024-11-18 11:42:50 +01:00
thunderbolt	thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge	2024-11-08 11:26:11 +01:00
tty	usb: cdc-acm: return correct error code on unsupported break	2024-11-18 12:12:50 +01:00
uh
uio	uio: Fix use-after-free in uio_open	2024-11-18 12:12:19 +01:00
usb	usb: cdc-acm: return correct error code on unsupported break	2024-11-18 12:12:50 +01:00
vdpa
vfio
vhost
vibrator
video	fbdev: flush deferred work in fb_deferred_io_fsync()	2024-11-18 12:12:47 +01:00
virt
virtio	virtio-mmio: fix memory leak of vm_dev	2024-11-18 10:58:28 +01:00
vision
vision3
visorbus
vlynq
vme
w1
watchdog	watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused	2024-11-18 12:12:42 +01:00
xen	swiotlb-xen: provide the "max_mapping_size" method	2024-11-18 12:10:57 +01:00
zorro
Kconfig	drivers: add stub kperfmon	2024-06-15 16:28:49 -03:00
Kconfig.variant1
Makefile	drivers: add stub kperfmon	2024-06-15 16:28:49 -03:00
Makefile.variant1