A double free in rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c may lead to a crash. Reference: https://github.com/torvalds/linux/commit/1680939e9ecf7764fba8689cfb3429c2fe2bb23c https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 2102206]
This was fixed for Fedora with the 5.18.4 stable kernel rebases.