Re: [PATCH 0/2] xen/scsiback: fix command-tag handling on pre-completion error paths
From: Martin K. Petersen
Date: Mon Jun 15 2026 - 22:02:17 EST
Michael,
> scsiback_get_pend_req() hands a pvSCSI frontend request a session tag
> and a zeroed se_cmd. Two error paths that run before the command
> completes through the target core mishandle that command and leak (or,
> in one case, underflow) the tag.
Applied to 7.2/scsi-staging, thanks!
--
Martin K. Petersen