[Bug 2143761] [NEW] [linux-nvidia-6.17]: NVFS SGL pool selection overrun, and DMA iterator leak

Public bug reported:

1) For NVFS I/Os, blk_rq_nr_phys_segments() can undercount GPU physical
segments since CPU-side segment contiguity may differ from GPU physical
contiguity. This can undersize the SGL pool causing a buffer overrun.

2) nvfs_blk_rq_dma_map_iter_next() can create DMA mappings that exceed
the number of entries that can be stored or subsequently unmapped.

Fix both issues.

** Affects: linux-nvidia-6.17 (Ubuntu)
Importance: Undecided
Status: New

** Package changed: linux (Ubuntu) => linux-nvidia-6.17 (Ubuntu)

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2143761

Title:
[linux-nvidia-6.17]: NVFS SGL pool selection overrun, and DMA iterator
leak

Status in linux-nvidia-6.17 package in Ubuntu:
New

Bug description:
1) For NVFS I/Os, blk_rq_nr_phys_segments() can undercount GPU
physical segments since CPU-side segment contiguity may differ from
GPU physical contiguity. This can undersize the SGL pool causing a
buffer overrun.

2) nvfs_blk_rq_dma_map_iter_next() can create DMA mappings that exceed
the number of entries that can be stored or subsequently unmapped.

Fix both issues.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-nvidia-6.17/+bug/2143761/+subscriptions