A use-after-free flaw exists in the Linux kernel’s edt-ft5x06 driver when debugging file system entries are torn down; the debugfs teardown frees a raw buffer but leaves the file system entry still accessible, allowing a read operation to access freed memory. This memory corruption can lead to system instability, data corruption, or other denial-of-service effects. The weakness is a classic use-after-free (CWE‑416).

The vulnerability affects the Linux kernel; no specific kernel version is listed in the advisory, so all kernel builds that include the edt-ft5x06 driver and have not yet been patched are potentially affected. The vendor/product is simply Linux/Linux as per the CNA information.

The EPSS score is not available and the issue is not listed in the CISA KEV catalog, indicating no known active exploitation at the time of disclosure. The CVSS score is not provided in the metadata, but a use‑after‑free in kernel code generally carries high impact. The likely attack vector is local, requiring access to the device or the ability to trigger the debugfs teardown. Conditions for exploitation include the kernel loading the edt-ft5x06 driver and the presence of exposed debugfs entries. Because the flaw is limited to memory corruption, it typically requires privileged context or sufficient control over the device to trigger the vulnerable path.