rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4
No PoCs found on GitHub currently.