CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's nvmet module, specifically when handling Identify commands for file-backed namespaces, which lack a block device. An attacker could exploit this flaw to trigger a NULL pointer dereference, leading to a potential denial of service. Organizations using Linux systems with CONFIG_BLK_DEV_ZONED enabled should prioritize addressing this issue to maintain system stability and prevent service disruptions.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() When a host issues an Identify command with CNS 05h (I/O Command Set specific Identify Namespace) and CSI 02h (ZNS) targeting a file-backed namespace, nvmet_execute_identify_ns_zns() calls bdev_is_zoned() on req->ns->bdev. A file-backed namespace has no block device, so req->ns->bdev is NULL and bdev_is_zoned() dereferences it, oopsing. The I/O command set is selected by the host-supplied CSI field and the command is routed here whenever CONFIG_BLK_DEV_ZONED is enabled, independent of the namespace backing type, so any file-backed namespace is exposed. Reject the command with Invalid Field when the namespace is not backed by a block device.