Re: [PATCH 0/2] xen/scsiback: fix command-tag handling on pre-completion error paths

From: Martin K. Petersen

Date: Mon Jun 15 2026 - 22:02:17 EST



Michael,

> scsiback_get_pend_req() hands a pvSCSI frontend request a session tag
> and a zeroed se_cmd. Two error paths that run before the command
> completes through the target core mishandle that command and leak (or,
> in one case, underflow) the tag.

Applied to 7.2/scsi-staging, thanks!

--
Martin K. Petersen