The report identifies a use‑after‑free condition in the Linux kernel’s MTD docg3 subsystem, specifically within the docg3_release() routine. After freeing floor devices with doc_release_device(), the code dereferences a pointer that points to the already-freed docg3 structure, leading to undefined behavior that can corrupt kernel memory or cause a crash. The weakness is a classic use‑after‑free flaw (CWE‑416). While the description does not explicitly state the required privileges, it is inferred that the exploit would need local kernel‑mode execution, such as a privileged user or a kernel module that can trigger the vulnerable function.

This defect resides in the upstream Linux kernel and therefore applies to any distribution that compiles the kernel with the unpatched docg3_release() code. No specific releases are listed, so any kernel built from the affected source tree prior to the commit series that introduces the fix is at risk. The only vendor explicitly mentioned is the Linux kernel project.

Because the anomaly occurs in kernel code, it can provide an attacker with the ability to corrupt critical data structures or execute arbitrary code with kernel privileges once a local foothold is achieved. The CVSS score is not published, but the nature of a kernel use‑after‑free bug implies a high severity. The EPSS score is not available, and the vulnerability is not catalogued in the CISA KEV list. Even without an advertised remote exploit, the combination of a kernel bug and the ability to gain local kernel execution is sufficient for an attacker to abuse this flaw if the system lacks other mitigation layers.