In the Linux kernel, following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work The cited commit fixed a crash was called for a cma_id while work on that id from previous call had not yet started. The item re-initialized in second call, which corrupted the work currently queue. However, it left problem queue_work (because is still pending queue call). In this case, cma_id_put (which is handler) therefore not called. This results userspace process (zombie process). Fix by calling cma_id_put() if fails.