On Fri, Jun 05, 2015 at 08:11:30PM +0900, Sergey Senozhatsky wrote: > zs_destroy_pool()->destroy_handle_cache() invoked from > zs_create_pool() can pass a NULL ->handle_cachep pointer > to kmem_cache_destroy(), which will dereference it. > > Signed-off-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx> Thanks, Sergey! -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>