Re: [PATCH v2] RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference

[Leon Romanovsky]

On Tue, 28 Apr 2026 23:42:49 +0100, Prathamesh Deshpande wrote:
> MLX5_IB_METHOD_DEVX_SUBSCRIBE_EVENT() links event_sub into sub_list
> before initializing the fields used by the shared error path.
> 
> If eventfd_ctx_fdget() then fails, the unwind path dereferences
> event_sub->ev_file in uverbs_uobject_put() and calls
> subscribe_event_xa_dealloc() with an unset xa_key_level1.
> 
> [...]

Applied, thanks!

[1/1] RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
      https://git.kernel.org/rdma/rdma/c/59d29eb26889b5

Best regards,
-- 
Leon Romanovsky <leon@xxxxxxxxxx>