Re: [PATCH] nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

Keith Busch <[email protected]> Tue, 28 Jul 2026 15:07:50 -0600
Newsgroups org.infradead.lists.linux-nvme
Message-ID <amkaJgFRImL888VT@kbusch-mbp>
On Mon, Jul 20, 2026 at 02:03:05PM +0800, Yang Xiuwei wrote:
> Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls
> nvme_cmd_allowed(). Unprivileged callers can thus issue I/O on a
> partition device or write through a read-only file descriptor.

Thanks, applied to nvme-7.3.