Linux Kernel NVMe over Fabrics Out-of-Bounds Access Vulnerability in Port Enablement

A vulnerability in the Linux kernel's NVMe over Fabrics (NVMe-oF) implementation has been identified, specifically in the 'nvmet_enable_port' function. When enabling a port without a configured transport, the function incorrectly uses 'NVMF_TRTYPE_MAX' (255) to access the transports array. This leads to an out-of-bounds memory access, as the transport type 255 is not supported. The issue arises because 'NVMF_TRTYPE_MAX' has become the default state since a recent commit, which introduced this vulnerability by allowing invalid transport type queries.

Impact

Exploitation of this vulnerability causes a global out-of-bounds memory access, which can lead to memory corruption or other undefined behavior.