Linux Kernel 4.1.41-4.1.50 - Use-After-Free in blkcg_init_queue
The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure.