Re: [PATCH v2 2/4] nvme: reject invalid pr_read_keys() num_keys values

From: Hannes Reinecke

Date: Thu Nov 27 2025 - 13:04:45 EST


On 11/27/25 16:54, Stefan Hajnoczi wrote:
The pr_read_keys() interface has a u32 num_keys parameter. The NVMe
Reservation Report command has a u32 maximum length. Reject num_keys
values that are too large to fit.

This will become important when pr_read_keys() is exposed to untrusted
userspace via an <linux/pr.h> ioctl.

Signed-off-by: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
---
drivers/nvme/host/pr.c | 4 ++++
1 file changed, 4 insertions(+)


Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
Cheers,

Hannes
--
Dr. Hannes Reinecke Kernel Storage Architect
hare@xxxxxxx +49 911 74053 688
SUSE Software Solutions GmbH, Frankenstr. 146, 90461 Nürnberg
HRB 36809 (AG Nürnberg), GF: I. Totev, A. McDonald, W. Knoblich