Skip to content

SPDK v25.05.1: Maintenance LTS Release

Choose a tag to compare

@tomzawadzki tomzawadzki released this 26 Sep 19:23
· 1806 commits to master since this release

nvmf

(CVE-2025-57275) Fixed (8981ddb) an array-out-of-bounds access during update of registrants
for a namespace when PTPL (Persist through power loss) was enabled.
If number of registrants exceeded 16 (SPDK_NVMF_MAX_NUM_REGISTRANTS) memory after
the array ended could have been written with data provided in Reservation Register
command by the initiator. PTPL needed to be enabled explicitly, as it is disabled by default.
Affected NVMe-oF transports include TCP and RDMA NVMe-oF in SPDK NVMe-oF target.