rpmsgprobe in drivers/rpmsg/virtiorpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.
{ "urgency": "not yet assigned" }