There are double free in rpmsg_probe() and rpmsg_virtio_add_ctrl_dev(). In addition, rpmsg_virtio_del_ctrl_dev() didn't use correct function to free the object. v2: Use a cover letter to integrate the three patches. Add comments in rpmsg_probe() and rpmsg_virtio_add_ctrl_dev(). Hangyu Hua (2): rpmsg: virtio: fix possible double free in rpmsg_probe() rpmsg: virtio: fix possible double free in rpmsg_virtio_add_ctrl_dev() Arnaud Pouliquen (1): rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl drivers/rpmsg/virtio_rpmsg_bus.c | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) -- 2.25.1