Re: [PATCH] RDMA/srp: fix use-after-free of a request in srp_destroy_qp()
From: Bart Van Assche
Date: Wed Aug 12 2026 - 16:36:34 EST
On 8/12/26 12:04 PM, Yehyeong Lee wrote:
Put the two completion
contexts in the channel, which outlives the queue pair.
This change can cause ch->reg_cqe and ch->inv_cqe to be overwritten
before the previously submitted work has completed, isn't it? Isn't that
a bug?
Thanks,
Bart.