A stale request bio pointer in the Linux kernel’s device‑mapper path can cause a double‑free followed by a use‑after‑free when cloned bios are released. Based on the description, it is inferred that the likely attack vector requires local privileged access to trigger the vulnerable I/O path, for example by initiating high‑frequency device requests through dm‑multipath. The resulting kernel memory corruption could allow an attacker to execute arbitrary code with kernel privileges or to crash the system. The vulnerability involves improper use-after-free leading to potential double‑free issues (CWE‑415).

The flaw affects the Linux kernel through its device‑mapper module, particularly when dm‑multipath is layered over PCIe NVMe namespaces. Any kernel containing unpatched device‑mapper code is potentially vulnerable; no specific kernel version is identified in the CVE data.

The CVSS score of 7.8 indicates high severity, but the EPSS score of less than 1% suggests a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require local or privileged access to trigger the vulnerable I/O path, such as initiating high‑frequency device requests through dm‑multipath. Successful exploitation could result in kernel memory corruption, potential code execution, or a denial of service.