The ib_isert module is releasing the isert connection both in
isert_wait_conn() handler as well as isert_free_conn() handler.
In isert_wait_conn() handler, it is expected to wait for iSCSI
session logout operation to complete. It should free the isert
connection only in isert_free_conn() handler.
When a bunch of iSER target is cleared, this issue can lead to
use-after-free memory issue as isert conn is twice released
Fixes:
|
||
|---|---|---|
| .. | ||
| ipoib | ||
| iser | ||
| isert | ||
| opa_vnic | ||
| rtrs | ||
| srp | ||
| srpt | ||
| Makefile | ||