A use‑after‑free flaw exists in a kernel module used by Huawei EMUI and HarmonyOS. The vulnerability allows memory corruption that can affect system availability and leak confidential data. The weakness is classified as CWE‑416, representing a classic use‑after‑free that undermines core kernel integrity.

The flaw affects devices running Huawei EMUI and Huawei HarmonyOS. No specific affected versions are listed, so all releases of these operating systems that contain the vulnerable kernel module could be impacted.

The CVSS base score is 5.9, indicating moderate severity. EPSS data is unavailable and the flaw is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation requires local or privileged access to load or manipulate the kernel module, making remote exploitation unlikely. The risk is significant in environments where local users have privileged rights or where the module operates in a high‑privilege context.