Re: [PATCH] io_uring/kbuf: free the replaced iovec after a successful grow

On Sun, 12 Jul 2026 14:27:12 +0000, Jaeyeong Lee wrote:
> The provided-buffer validation fix deferred freeing a cached iovec
> until validation completed. However, the deferred free uses arg->iovs.
> After a grow, that points to the newly allocated array. Without a grow,
> it points to the cached array that remains in use.
> 
> This leaves the caller with a dangling iovec in both cases and can
> result in repeated frees. Only free org_iovs when arg->iovs actually
> replaced it.
> 
> [...]

Applied, thanks!

[1/1] io_uring/kbuf: free the replaced iovec after a successful grow
      commit: f1596ba3e6b390aa0fef8466afce44efecf39d8d

Best regards,
-- 
Jens Axboe