The Linux kernel bug causes UCSI instances to leave debugfs entries in place after ucsi_unregister() is called. The register function creates per-instance directories, but the unregister path fails to remove them until ucsi_destroy() is invoked. The result is that subsequent re-registrations create a directory that already exists, generating repeated debugfs error logs and leaving orphaned entries. While the vulnerability only affects internal kernel debug files, it can lead to a noisy kernel log, unnecessary debugfs growth, and in rare cases a denial‑of‑service condition if the directory creation repeatedly fails. The flaw is a classic error in resource cleanup and does not directly expose user data or offer remote code execution capabilities.

All Linux kernel builds released before the bug fix are affected. This includes any distribution that has not applied the corresponding kernel patch. Drivers such as ucsi_glink, which register and unregister the same UCSI instance across remoteproc restarts, are most likely to trigger the issue.

The vulnerability requires local kernel execution to trigger; no remote network attack vector is defined. The CVSS score is not provided, and EPSS information is unavailable. The flaw is not listed in the CISA KEV catalog. Because the bug only corrupts debugfs entries and produces log spam, the overall risk level is low, but it can create operational noise and may affect service stability under high‑frequency reboot scenarios.