
Under high DMA resource utilization, if a request for DMA resources (via
dma_map_load()) fails, a stale pointer to freed memory is returned to the
requestor, setting up the potential for a double free of malloc'd memory or
dereferencing through that pointer resulting in a panic.


