A use-after-free flaw was found in nbd_add_socket in drivers/block/nbd.c that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup.