staging: frontier: use after free in disconnect()