From: Eric Dumazet <eduma...@google.com> Date: Tue, 10 Oct 2017 19:12:33 -0700
> If for some reason, the newly allocated child need to be freed,
> we will call cgroup_put() (via sk_free_unlock_clone()) while the
> corresponding cgroup_get() was not yet done, and we will free memory
> too soon.
>
> Fixes: d979a39d7242 ("cgroup: duplicate cgroup reference when cloning
> sockets")
> Signed-off-by: Eric Dumazet <eduma...@google.com>
Applied and queued up for -stable.
