I wonder if we need 148ca04518070910739dfc4eeda765057856403d ("net: rose: fix UAF bug caused by rose_t0timer_expiry") as well or if this just warrants yet another CVE. Can you open a bug and make sure that one is included everywhere? Cascardo.