On Thu, 3 Mar 2022 09:51:15 +0800, Jianglei Nie wrote:
> fc_exch_release(ep) will decrease the ep's reference count. When the
> reference count reaches zero, it is freed. But ep is still used in the
> following code, which will lead to a use after free.
>
> We should return the function after the call of fc_exch_release() to
> avoid use after free.
>
> [...]
Applied to 5.18/scsi-queue, thanks!
[1/1] scsi: libfc: Fix use after free in fc_exch_abts_resp()
https://git.kernel.org/mkp/scsi/c/271add11994b
--
Martin K. Petersen Oracle Linux Engineering
