Re: [PATCH 0/2] nvmet: fix configfs attribute validation

From: Keith Busch

Date: Thu Nov 05 2026 - 10:36:17 EST



On Wed, 04 Nov 2026 03:07:20 +0800, shao.mingyin@xxxxxxxxxx wrote:
> This series fixes two independent configfs attribute bugs in nvmet.
>
> Patch 1 fixes a use-after-free when attr_tbkas is written while a
> controller is going away. The store callback walked subsys->ctrls under
> nvmet_config_sem only, while the list is protected by subsys->lock and
> nvmet_ctrl_free() does not take nvmet_config_sem. Take subsys->lock for
> the walk, as the qid_max store callback already does.
>
> [...]

Applied, thanks!

[1/2] nvmet: take subsys->lock when forcing reconnects for tbkas
commit: fb205953868a7f29317ad619366a5faf2bb268a7
[2/2] nvmet: bound the traddr and trsvcid configfs writes
commit: 21d6e9f2fb79da2a516901697bd562c361ed6160

Best regards,
--
Keith Busch <kbusch@xxxxxxxxxx>