On Thu, 11 Aug 2022 14:44:59 +0530, Anuj Gupta wrote: > Commit 97b388d70b53 ("io_uring: handle completions in the core") moved the > error handling from handler to core. But for io_uring_cmd handler we end > up completing more than once (both in handler and in core) leading to > use_after_free. > Change io_uring_cmd handler to avoid calling io_uring_cmd_done in case > of error. > > [...] Applied, thanks! [1/1] io_uring: fix error handling for io_uring_cmd commit: f1bb0fd63c374e1410ff05fb434aa78e1ce09ae4 Best regards, -- Jens Axboe