A race condition exists in the Linux kernel power subsystem where the power supply device allocator deallocates its handle before the interrupt line is unregistered during removal, or may use an uninitialized handle during probe. The resulting use‑after‑free causes the interrupt routine to call power_supply_changed() with a dangling reference, which typically leads to a kernel crash or silent memory corruption that can render the system non‑operational. The flaw falls under the well‑known kernel misuse category of use‑after‑free (CWE‑416).

All Linux kernel releases that include the cpcap‑battery power supply driver are affected; no explicit version boundaries are provided, so any kernel where this driver follows the described allocation order is vulnerable unless superseded by the fix.

Based on the description, it is inferred that the attack requires a local user to trigger device removal or probe while an IRQ is pending—implying local privilege or kernel module manipulation is necessary. The CVSS score is not supplied, the EPSS is unavailable, and the vulnerability is not listed in the CISA KEV catalog. Even though the risk remains limited to systems that load the affected driver, a local privilege holder could exploit the flaw to crash the system or corrupt memory, potentially leading to further exploitation if memory corruption is leveraged.