This vulnerability arises when the ice driver's error path during device activation triggers a double free (CWE-1341, CWE-415). The driver releases the auxiliary device object but later calls kfree on the same structure again, exposing kernel memory to corruption. Such corruption can be leveraged by an attacker to compromise system integrity, potentially enabling execution of arbitrary code with elevated privileges.

The flaw affects the Linux kernel's ice module, which implements Linux Ethernet devices. No specific kernel version is listed in the CVE data, so any kernel that includes the unpatched ice driver could be vulnerable. Regions lacking the fix should be treated as potentially affected until a kernel update is applied.

The CVSS score of 7.8 is available, and the EPSS score is < 1%; the vulnerability is not listed in CISA KEV. The attack vector is likely local, requiring interaction with the ice driver to trigger the faulty error path. Consequently, this is a high-risk kernel flaw that can be exploited to gain elevated privileges, especially on systems with exposed or misconfigured network interfaces that load the ice module.