CVE-2023-52454

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length<br /> <br /> If the host sends an H2CData command with an invalid DATAL,<br /> the kernel may crash in nvmet_tcp_build_pdu_iovec().<br /> <br /> Unable to handle kernel NULL pointer dereference at<br /> virtual address 0000000000000000<br /> lr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp]<br /> Call trace:<br /> process_one_work+0x174/0x3c8<br /> worker_thread+0x2d0/0x3e8<br /> kthread+0x104/0x110<br /> <br /> Fix the bug by raising a fatal error if DATAL isn&amp;#39;t coherent<br /> with the packet size.<br /> Also, the PDU length should never exceed the MAXH2CDATA parameter which<br /> has been communicated to the host in nvmet_tcp_handle_icreq().