Kernel-memory corruption via premature event-handler registration

Use-after-free in the RDMA SRP target driver in affected Linux kernels allows local users to corrupt memory during failed device setup. The driver registers its event handler before srpt device initialization completes, so an error-path race leaves srpt_refresh_port() writing through a freed, partially initialized object. Low-privileged local access and the rare initialization race are required, and the resulting kernel-memory write interrupts the affected system.