In the Linux kernel, the following vulnerability has been resolved:

kernel/resource: fix kfree() of bootmem memory again

Since commit ebff7d8f270d ("mem hotunplug: fix kfree() of bootmem
memory"), we could get a resource allocated during boot via
alloc_resource().  And it's required to release the resource using
free_resource().  Howerver, many people use kfree directly which will
result in kernel BUG.  In order to fix this without fixing every call
site, just leak a couple of bytes in such corner case.

https://git.kernel.org/stable/c/0cbcc92917c5de80f15c24d033566539ad696892

https://git.kernel.org/stable/c/a9e88c2618d228d7a4e7e515cf30dc0d0d813f27

https://git.kernel.org/stable/c/ab86020070999e758ce2e60c4348f20bf7ddba56

https://git.kernel.org/stable/c/d7faa04a44a0c37ac3d222fa8e0bdcbfcee9c0c8