socket->base is unmapped in yenta_close(), which is called by
cardbus_remove().  The value of socket->base is not changed to
NULL, so it becomes invalid.

Then cardbus_remove() calls class_device_unregister(), which calls
pcmcia_unregister_socket(), which it turn tries to access memory
space of the socket.