Re: (subset) [PATCH v2 0/2] RDMA/srp: fix use-after-free of a request in srp_destroy_qp()
From: Leon Romanovsky
Date: Wed Sep 02 2026 - 09:15:22 EST
On Tue, 18 Aug 2026 12:52:27 +0900, Yehyeong Lee wrote:
> Bart asked whether reordering srp_remove_target() also fixes the crash.
> It does. Against the same test target, the report appears in 5 of 5
> runs without his patch and in 0 of 5 with it. The drain still finds
> the same two completions; the request pool now outlives it. A
> conforming target was unchanged over 5 runs each way. Both patches
> applied together behave the same way. I never reached the SCSI error
> handler.
>
> [...]
Applied, thanks!
[2/2] RDMA/srp: Fix srp_remove_target()
https://git.kernel.org/rdma/rdma/c/9cdfad5dd5529e
Best regards,
--
Leon Romanovsky <leon@xxxxxxxxxx>