Re: [PATCH v2] scsi: target: fix demo-mode dynamic ACL dev-entry UAF vs LUN teardown

[Martin K. Petersen (Oracle)]

On Wed, 14 Oct 2026 11:37:46 +1000, Yu Zhang wrote:

> A demo-mode (generate_node_acls=1) login that allocates a dynamic
> NodeACL populates that ACL's per-LUN dev entries in
> core_tpg_add_node_to_devs() *before* the ACL is linked onto
> tpg->acl_node_list by target_add_node_acl():
> 
> 	core_tpg_check_initiator_node_acl():
> 		...
> 		core_tpg_add_node_to_devs(acl, tpg, NULL); /* builds deves */
> 		target_add_node_acl(acl);                  /* only now listed */
> 
> [...]

Applied to 7.4/scsi-queue, thanks!

[1/1] scsi: target: fix demo-mode dynamic ACL dev-entry UAF vs LUN teardown
      https://git.kernel.org/mkp/scsi/c/6a6e7d7230cd

-- 
Martin K. Petersen