In the Linux kernel, a flaw in the networking shaper component allows a net device to be accessed after it has been unregistered. The code takes a reference to the device during Netlink callback preparation and later accesses it under a lock or RCU protection, but the transition does not include a liveness check. This can result in the device being freed while still referenced, leading to a use-after-free condition that may cause memory corruption or a denial of service. The weakness is a classic use-after-free bug.

The flaw affects all Linux kernel implementations. The known vendor entry lists the generic Linux kernel, and no specific affected version is supplied in the CNA data, implying that older kernel releases lacking the patch are susceptible.

The CVSS score of 5.5 indicates a moderate severity, and the EPSS score of less than 1% suggests the exploitation likelihood is low. The vulnerability is not listed in the CISA KEV catalog. An attacker would likely need local or privileged access to trigger the Netlink operation that exercises the buggy path; the attack vector is therefore inferred to be local via Netlink. While fixed protections reduce the risk of complete code execution, the use-after-free could still lead to kernel crashes and service disruption.