linux-kernel - Re: [BUG report] kernel warnings with Samsung 970 EVO 2TB SSD

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <DC5V8VGBDFQ8.3SZ2OASX2W75E@cknow.org>
Date: Mon, 18 Aug 2025 23:20:00 +0200
From: "Diederik de Haas" <didi.debian@...ow.org>
To: "Keith Busch" <kbusch@...nel.org>
Cc: <linux-nvme@...ts.infradead.org>, <linux-kernel@...r.kernel.org>,
 "Diederik de Haas" <didi.debian@...ow.org>
Subject: Re: [BUG report] kernel warnings with Samsung 970 EVO 2TB SSD

On Mon Aug 18, 2025 at 10:48 PM CEST, Diederik de Haas wrote:
> On Mon Aug 18, 2025 at 8:58 PM CEST, Keith Busch wrote:
>> On Sat, Aug 16, 2025 at 04:11:00PM +0200, Diederik de Haas wrote:
>>> On Sat Aug 16, 2025 at 3:20 PM CEST, Keith Busch wrote:
>>> 
>>> The other kernel warning is this:
>>> 
>>>   nvme nvme0: using unchecked data buffer
>>> 
>>> The SUBNQN message appears every time, this one appears often, but not
>>> always.
>>
>> That one means you've sent a user space passthrough command to a device
>> that doesn't support SGL DMA. Without that, the nvme protocol uses
>> implicitly sized DMA that the driver can't be sure is accurate. The user
>> could theoretically provide a short buffer that can corrupt memory if
>> done by accident, or be used as an attack vector if done by malicious
>> software.
>>
>> This is also not something to worry about unless you run malicious or
>> buggy software.
>
> I would be surprised if I was running malicious software, but pretty
> much all software has bugs, so that's ofc possible.
> ...
>
> Uninstalled the 3 programs from R5S that showed up the most around the
> warning message and it's still there. 
> Would 'dyndbg' be helpful to determine what program is buggy?
  
Looks like I found the 'winner': udisks2 (package)

I uninstalled that and in the 10 boots after that, I did not see the
message. Installed it again (without Recommends) and it was back on the
first (re)boot.

Thanks!

Cheers,
  Diederik

Download attachment "signature.asc" of type "application/pgp-signature" (229 bytes)