The bug occurs in the Linux kernel goldfish power supply driver. A race between IRQ registration and power_supply registration can trigger an interrupt handler after the power_supply handle has been freed, causing power_supply_changed() to access freed memory. This usually results in a kernel crash or silent memory corruption. The weakness is a use‑after‑free race condition.

The flaw affects any Linux kernel that includes the goldfish power supply driver. No specific kernel version range is supplied; systems running kernel images containing the driver are potentially vulnerable. The affected product is the Linux kernel power supply subsystem.

The CVSS score of 7.8 indicates high severity for an unprotected use‑after‑free in a privileged kernel function. EPSS < 1% suggests a low probability of exploitation, and the vulnerability is not listed in CISA KEV. Nonetheless, an attacker with local or physical access to a device that utilizes the goldfish power supply could trigger an interrupt during driver removal or initialization, causing a crash or silent memory corruption that could be leveraged for escalation. The attack vector is likely local or hardware‑based, as the fault occurs during interrupt handling for the goldfish driver.