In the Linux kernel, the following vulnerability has been resolved:
dm cache: Fix UAF in destroy()
Dmcache also has the same UAF problem when dmresume() and dm_destroy() are concurrent.
Therefore, cancelling timer again in destroy().