On Mon, 4 Oct 2021 16:06:08 -0500, Mike Christie wrote:
> The patch:
>
> d39df158518c ("scsi: iscsi: Have abort handler get ref to conn")
>
> added iscsi_get_conn/iscsi_put_conn calls during abort handling but then
> also changed the handling of the case where we detect an already completed
> task where we now end up doing a goto to the common put/cleanup code. This
> results in a iscsi_task use after free, because the common cleanup code
> will do a put on the iscsi_task.
>
> [...]
Applied to 5.15/scsi-fixes, thanks!
[1/1] scsi: iscsi: Fix iscsi_task use after free
https://git.kernel.org/mkp/scsi/c/258aad75c621
--
Martin K. Petersen Oracle Linux Engineering
