Re: [PATCH] scsi: target: iscsi: Fix race in discovery auth updates

[Linfeng Sun]

On Tue, Aug 11, 2026 at 8:49 PM Linfeng Sun <linfeng.sun.dev@xxxxxxxxx> wrote:
>
> Separate configfs opens can concurrently update the discovery AuthMethod
> parameter. Both callers may free the same value in
> iscsi_update_param_value(), causing a double-free.
>
> Protect the lookup and replacement with the discovery TPG access lock, as
> used by the other TPG configfs parameter updates.
>
> I dont consider this a high-severity security bug, but for safety as a
> precaution, I can provide the reproducer PoC privately to the maintainers
> if needed.

Hi,
A gentle ping on this patch. It fixes a reproducible double-free in
discovery AuthMethod updates.

I have not received a response for over two weeks. Please let me know if
you have any comments.

Thanks,
Linfeng Sun