Commits
![Dan Carpenter](https://secure.gravatar.com/avatar/85ff6b2aa66ef9f0bf35105783fd2ae2.jpg?s=96&d=mm)
Dan Carpenter committed a0f1d21c1cc
KVM: use after free in kvm_ioctl_create_device() We should move the ops->destroy(dev) after the list_del(&dev->vm_node) so that we don't use "dev" after freeing it. Fixes: a28ebea2adc4 ("KVM: Protect device ops->create and list_add with kvm->lock") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: David Hildenbrand <david@redhat.com> Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>