CVE-2025-38658

CVE-2025-38658 affects the Linux kernel nvmet PCI-EPF path. The issue occurs when nvmet_req_init() fails (e.g., on an unsupported opcode), because __nvmet_req_complete() can trigger queue_response which may call nvmet_pci_epf_complete_iod(), and nvmet_pci_epf_exec_iod_work() may also invoke the s...