refcount increment on mid-destruction file [CVE-2021-1048]

We discussed this vulnerability as part of our weekly podcast on 15 December 2021

This is straight forward, yet subtle bug, basically taking a reference to a file while it is actively being deleted leading to a use after free despite holding onto a reference.

Patch: Used get_file_rcu instead of get_file which will check for this condition and bail.