This flaw is a classic Use‑After‑Free caused by the removal routine for CXL memory devices in the Linux kernel. During bottom‑up detachment, child ports are unlocked and unregistered while their parent ports may have already been freed. The kernel then attempts to unlock or unregister already‑freed memory, producing lock warnings and corrupting kernel structures. The corruption can lead to kernel crashes or data integrity issues but does not provide a direct path for remote code execution.

All Linux kernels that load the cxl_acpi driver with CXL memory devices are affected. This includes every Linux kernel version that supports CXL devices (e.g., the 7.0 release candidates and older releases). Systems that never use CXL hardware or never load the relevant driver are not impacted.

The CVSS score of 7.8 indicates medium‑high severity. The EPSS score is <1%, meaning exploitation is unlikely in the wild, and the flaw is not listed in CISA’s KEV catalog. The likely attack vector is local, requiring privileged or root access to trigger the module reload or device removal that would exercise the vulnerable code. As such, the risk to unprivileged or non‑CXL‑enabled systems is low, but the corruption can cause denial of service if the flaw is activated on a vulnerable system.