On Tue, Sep 20, 2011 at 05:29:49PM +0530, Srikar Dronamraju wrote: > +static void delete_uprobe(struct uprobe *uprobe) > +{ > + unsigned long flags; > + > + spin_lock_irqsave(&uprobes_treelock, flags); > + rb_erase(&uprobe->rb_node, &uprobes_tree); > + spin_unlock_irqrestore(&uprobes_treelock, flags); > + put_uprobe(uprobe); > + iput(uprobe->inode); Use-after-free when put_uprobe() kfrees() the uprobe? Stefan -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/ Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>