Andrey Vatoropin 0260ad551b scsi: target: Reset t_task_cdb pointer in error case ...

commit 5053eab38a4c4543522d0c320c639c56a8b59908 upstream.

If allocation of cmd->t_task_cdb fails, it remains NULL but is later
dereferenced in the 'err' path.

In case of error, reset NULL t_task_cdb value to point at the default
fixed-size buffer.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 9e95fb805d ("scsi: target: Fix NULL pointer dereference")
Cc: stable@vger.kernel.org
Signed-off-by: Andrey Vatoropin <a.vatoropin@crpt.ru>
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Link: https://patch.msgid.link/20251118084014.324940-1-a.vatoropin@crpt.ru
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-11 15:21:58 +01:00

..

iscsi

scsi: target: iscsi: Fix timeout on deleted connection

2025-06-04 14:41:52 +02:00

loopback

scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

2025-12-01 11:41:42 +01:00

sbp

scsi: target: sbp: Remove default fabric ops callouts

2023-03-16 23:36:36 -04:00

tcm_fc

scsi: target: fcoe: Remove default fabric ops callouts

2023-03-16 23:36:36 -04:00

tcm_remote

scsi: target: Add virtual remote target

2023-03-16 23:36:37 -04:00

Kconfig

scsi: target: Add virtual remote target

2023-03-16 23:36:37 -04:00

Makefile

scsi: target: Add virtual remote target

2023-03-16 23:36:37 -04:00

target_core_alua.c

scsi: target: core: Use RTPI from target port

2023-03-09 21:29:23 -05:00

target_core_alua.h

…

target_core_configfs.c

scsi: target: Do not write NUL characters into ASCII configfs output

2026-01-11 15:21:19 +01:00

target_core_device.c

scsi: target: core: Fix null-ptr-deref in target_alloc_device()

2024-11-01 01:58:24 +01:00

target_core_fabric_configfs.c

scsi: target: core: Fix invalid memory access

2023-04-11 20:49:43 -04:00

target_core_fabric_lib.c

scsi: target: core: Generate correct identifiers for PR OUT transport IDs

2025-08-28 16:28:29 +02:00

target_core_file.c

scsi: target: core: add missing file_{start,end}_write()

2024-01-25 15:35:45 -08:00

target_core_file.h

scsi: target: target/file: Add support of direct and async I/O

2018-05-14 22:40:08 -04:00

target_core_hba.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

target_core_iblock.c

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2023-09-02 12:02:41 -07:00

target_core_iblock.h

scsi: target: iblock: Add backend plug/unplug callouts

2021-03-04 17:37:02 -05:00

target_core_internal.h

scsi: target: core: Generate correct identifiers for PR OUT transport IDs

2025-08-28 16:28:29 +02:00

target_core_pr.c

scsi: target: core: Generate correct identifiers for PR OUT transport IDs

2025-08-28 16:28:29 +02:00

target_core_pr.h

scsi: target: core: Unify NAA identifier generation

2021-05-15 14:14:28 -04:00

target_core_pscsi.c

scsi: target: pscsi: Fix bio_put() for error case

2024-03-01 13:34:59 +01:00

target_core_pscsi.h

scsi: target: pscsi: Remove struct pscsi_plugin_task

2022-03-01 22:21:49 -05:00

target_core_rd.c

scsi: target: Rename sbc_ops to exec_cmd_ops

2023-04-11 21:55:36 -04:00

target_core_rd.h

scsi: target: Add the DUMMY flag to rd_mcp

2021-04-05 23:26:38 -04:00

target_core_sbc.c

scsi: target: Rename sbc_ops to exec_cmd_ops

2023-04-11 21:55:36 -04:00

target_core_spc.c

scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()

2025-06-04 14:42:10 +02:00

target_core_stat.c

scsi: target: core: Use RTPI from target port

2023-03-09 21:29:23 -05:00

target_core_tmr.c

scsi: target: Fix multiple LUN_RESET handling

2023-03-24 17:32:23 -04:00

target_core_tpg.c

Merge patch series "target: TMF and recovery fixes"

2023-03-24 17:39:15 -04:00

target_core_transport.c

scsi: target: Reset t_task_cdb pointer in error case

2026-01-11 15:21:58 +01:00

target_core_ua.c

scsi: target: use an enum to track emulate_ua_intlck_ctrl

2020-02-21 17:37:16 -05:00

target_core_ua.h

scsi: target: Fix handling of removed LUNs

2018-07-02 16:44:32 -04:00

target_core_user.c

genetlink: hold RCU in genlmsg_mcast()

2024-11-01 01:58:23 +01:00

target_core_xcopy.c

scsi: target: Pass in cmd counter to use during cmd setup

2023-03-24 17:32:23 -04:00

target_core_xcopy.h

scsi: target: core: Change the way target_xcopy_do_work() sets restiction on max I/O

2022-11-24 02:16:19 +00:00