In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy() Dmcache also has the same UAF problem when dmresume() and dm_destroy() are concurrent. Therefore, cancelling timer again in destroy().
{ "urgency": "not yet assigned" }