On Sat, 23 May 2020 13:11:29 +0300, Dan Carpenter wrote: > The pr_debug() dereferences "cmd" after we already freed it by calling > tcmu_free_cmd(cmd). The debug printk needs to be done earlier. Applied to 5.8/scsi-queue, thanks! [1/1] scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd() https://git.kernel.org/mkp/scsi/c/9d7464b18892 -- Martin K. Petersen Oracle Linux Engineering