## Summary It is possible to cause a kernel stack free in the syscall sys_fsc2h_ctrl. Consider 4 threads: Thread 1: The command CMD_WAIT (0x10001) in sys_fsc2h_ctrl waits for path 1. Thread 2: The command CMD_WAIT (0x10001) in sys_fsc2h_ctrl waits for path 2. Thread 3: The command CMD_RESOLVE (0x2…