The vulnerability exists in the Linux kernel power supply subsystem for bq256xx devices. A race condition allows the interrupt handler to call power_supply_changed() after the power_supply handle has been freed, or before it has been registered. This use‑after‑free can cause a kernel crash or memory corruption, resulting in service interruption or unpredictable system behavior.

The affected product is the Linux kernel that includes the bq256xx power supply driver for devices using the bq256xx charger. No specific kernel version is listed; the fix is included in kernel releases that reorder IRQ request after driver registration.

The CVSS score is not provided and EPSS is unavailable, so the exact exploit probability is unknown. The issue requires a hardware interrupt race during driver removal or probe; it is thus likely a local or physical‑access scenario rather than a remote attack vector. The vulnerability can crash the system or corrupt memory but there is no evidence of remote code execution. The lack of a KEV listing suggests no known live exploitation has been observed.