kernel/net/netrom/nr_timer.c
.. .. @@ -121,6 +121,7 @@ 121 121 is accepted() it isn't 'dead' so doesn't get removed. */ 122 122 if (sock_flag(sk, SOCK_DESTROY) || 123 123 (sk->sk_state == TCP_LISTEN && sock_flag(sk, SOCK_DEAD))) { 124 + sock_hold(sk);124 125 bh_unlock_sock(sk); 125 126 nr_destroy_socket(sk); 126 127 goto out;