On Fri, 14 Dec 2012 15:03:10 +0400
Konstantin Khlebnikov<khlebnikov@xxxxxxxxxx> wrote:
This patch fixes use-after-free and double-free bugs in edac_mc_sysfs_exit().
mci_pdev has single reference and put_device() calls mc_attr_release() which
calls kfree(), thus following device_del() works with already released memory.
An another kfree() in edac_mc_sysfs_exit() releses the same memory again. Great.
Patches for this were posted a while ago by Jean Delvare. See bugzilla
50491 as well for this.