Hi Ben, On Fri, Nov 20, 2015 at 9:56 AM, Benjamin Coddington <bcodding@xxxxxxxxxx> wrote: > > If clp->cl_cb_ident is zero, then nfs_cb_idr_remove_locked() skips removing > it when the nfs_client is freed. A decoding or server bug can then find > and try to put that first nfs_client which would lead to a crash. Thanks for fixing! Have you ever seen such a crash in the wild? IOW: is this something we should consider for stable? Cheers Trond -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html