In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: fix double free in atmelpmecccreate_user()
The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Calling kfree(user) will lead to a double free.