Re: (subset) [PATCH v2 0/2] RDMA/srp: fix use-after-free of a request in srp_destroy_qp()

From: Leon Romanovsky

Date: Wed Sep 02 2026 - 09:15:22 EST



On Tue, 18 Aug 2026 12:52:27 +0900, Yehyeong Lee wrote:
> Bart asked whether reordering srp_remove_target() also fixes the crash.
> It does. Against the same test target, the report appears in 5 of 5
> runs without his patch and in 0 of 5 with it. The drain still finds
> the same two completions; the request pool now outlives it. A
> conforming target was unchanged over 5 runs each way. Both patches
> applied together behave the same way. I never reached the SCSI error
> handler.
>
> [...]

Applied, thanks!

[2/2] RDMA/srp: Fix srp_remove_target()
https://git.kernel.org/rdma/rdma/c/9cdfad5dd5529e

Best regards,
--
Leon Romanovsky <leon@xxxxxxxxxx>