Hello:

This patch was applied to netdev/net.git (master)
by David S. Miller [off-list ref]:

On Wed,  9 Feb 2022 20:53:45 +0800 you wrote:

The ax25_kill_by_device() will set s->ax25_dev = NULL and
call ax25_disconnect() to change states of ax25_cb and
sock, if we call ax25_bind() before ax25_kill_by_device().

However, if we call ax25_bind() again between the window of
ax25_kill_by_device() and ax25_dev_device_down(), the values
and states changed by ax25_kill_by_device() will be reassigned.

[...]

Here is the summary with links:
  - ax25: fix UAF bugs of net_device caused by rebinding operation
    https://git.kernel.org/netdev/net/c/feef318c855a

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html