Description: net: fix use-after-free in tw_timer_handler
References:
Notes:
 carnil> Introduced in 61a7e26028b9 ("mib: put net statistics on struct net").
 carnil> Vulnerable versions: 2.6.27-rc1.
Bugs:
upstream: released (5.16-rc8) [e22e45fc9e41bf9fcc1e92cfb78eb92786728ef0]
6.7-upstream-stable: N/A "Fixed before branching point"
6.6-upstream-stable: N/A "Fixed before branching point"
6.1-upstream-stable: N/A "Fixed before branching point"
5.10-upstream-stable: released (5.10.90) [2386e81a1d277f540e1285565c9d41d531bb69d4]
4.19-upstream-stable: released (4.19.224) [a8e1944b44f94f5c5f530e434c5eaee787254566]
sid: released (5.15.15-1)
6.1-bookworm-security: N/A "Fixed before branching point"
5.10-bullseye-security: released (5.10.92-1)
4.19-buster-security: released (4.19.232-1)