Hi Michael: On Tue, Jul 29, 2025 at 3:39 PM Jason Wang <[email protected]> wrote: > > Commit 7918bb2d19c9 ("vhost: basic in order support") introduces > vq->nheads to store the number of batched used buffers per used elem > but it forgets to initialize the vq->nheads to NULL in > vhost_dev_init() this will cause kfree() that would try to free it > without be allocated if SET_OWNER is not called. > > Reported-by: JAEHOON KIM <[email protected]> > Reported-by: Breno Leitao <[email protected]> > Fixes: 7918bb2d19c9 ("vhost: basic in order support") > Signed-off-by: Jason Wang <[email protected]>
I didn't see this in your pull request. Thanks

