kernel: use-after-free in l1oip timer handlers

A use-after-free flaw was found in the Linux kernel’s ISDN over IP tunnel functionality in how a local user triggers the releasecard function called from l1oipcleanup. This flaw allows a local user to crash or potentially escalate their privileges on the system...