The flaw is in the Linux power_supply subsystem, specifically the sbs‐battery driver. An improper ordering between a devm_ IRQ request and a devm_ power_supply handle registration creates a race condition. When the driver is removed or during probe, an IRQ can fire after the power_supply handle has been freed or before it is fully registered. The interrupt handler then calls power_supply_changed() with a dangling or uninitialized pointer, causing the kernel to crash or silently corrupt memory, potentially enabling privilege escalation or denial of service at kernel level.

The vulnerability exists in any Linux kernel that includes the sbs‑battery power_supply driver and has not yet applied the fix identified by commit 14d4dee5d8fb361bfff275832087254beab66d72. The affected products are generic Linux kernels; no specific versions are enumerated, so all distributions shipping impacted kernel code are susceptible.

Exploitation requires triggering an interrupt during driver removal or probe, which is a local privilege escalation scenario that can lead to system crash or memory corruption. EPSS data is not available and the flaw is not listed in the CISA KEV catalog, but the kernel‑level nature of the bug and lack of a mitigation increases the risk. The CVSS score is not provided, yet the impact and potential for full kernel compromise indicate high severity.