On Thu, 20 Feb 2025 16:20:39 +0200, Arthur Simchaev wrote:
In case the device doesn't support arpmb, the kernel get memory crash due to copy user data in bsg_transport_sg_io_fn level. So in case ufs_bsg_exec_advanced_rpmb_req returned error, do not set the job's reply_len.
Memory crash backtrace: 3,1290,531166405,-;ufshcd 0000:00:12.5: ARPMB OP failed: error code -22
[...]
Applied to 6.14/scsi-fixes, thanks!
[1/1] ufs: core: bsg: Fix memory crash in case arpmb command failed https://git.kernel.org/mkp/scsi/c/f27a95845b01