Linux kernel bug fix: bonding: wait for sysfs kobject destruction before freeing struct slave
Subsystem: drivers/net (drivers/net/bonding/bond_sysfs_slave.c)
Bug type: use-after-free, severity: high
Keywords: use after free;reference count
Files changed: drivers/net/bonding/bond_main.c;drivers/net/bonding/bond_sysfs_slave.c;include/net/bonding.h
Introduced by sfeldma@cumulusnetworks.com on 2014-01-17 18:51:58 -0800; fixed by Jamie Iles on 2020-11-21 13:07:00 -0800 (lifetime: 2499 days)