Hi,
We notice that after client_put(client); at #line 1316, client is dereferenced l(e.g., #line 1318), and we don't see any client_get(client) like statement before clientt_put(client). Could it be a uaf issue?
https://github.com/torvalds/linux/blob/master/drivers/firewire/core-cdev.c#L1316
Best regards.
Chengfeng