Re: [PATCH] nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()

Keith Busch <[email protected]> Mon, 10 Aug 2026 16:55:34 -0600

Newsgroups	org.infradead.lists.linux-nvme
Message-ID	<anpW5hx_HZQaC0A5@kbusch-mbp>

On Tue, Aug 04, 2026 at 11:36:05AM +0800, Guixin Liu wrote:
> When a host issues an Identify command with CNS 05h (I/O Command Set
> specific Identify Namespace) and CSI 02h (ZNS) targeting a file-backed
> namespace, nvmet_execute_identify_ns_zns() calls bdev_is_zoned() on
> req->ns->bdev. A file-backed namespace has no block device, so
> req->ns->bdev is NULL and bdev_is_zoned() dereferences it, oopsing.

Thanks, applied to nvme-7.3.