In the Linux kernel, the following vulnerability has been resolved:
net: afcan: do not leave a dangling sk pointer in cancreate()
On error cancreate() frees the allocated sk object, but sockinit_data() has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later.