The vulnerability is a use‑after‑free in the function of_unittest_changeset() within the Linux kernel. After the reference count of a device node is decremented, the node may be freed while the code continues to use the same pointer to read properties. This can corrupt memory and, because the code runs with kernel privileges, may allow the execution of arbitrary code at privileged levels.

All Linux kernel builds that contain the unpatched version of of_unittest_changeset(). The vendor list indicates generic Linux kernels with no specific version range supplied, so any installation of the kernel that has not yet incorporated the fix commit is potentially vulnerable.

The EPSS score is not available and the vulnerability is not listed in CISA KEV. The use‑after‑free occurs in critical kernel code, giving it high severity. It is exploitable locally by code that triggers the function—such as malicious modules, testing tools, or other privileged processes. As the flaw occurs in privileged kernel context, successful exploitation can lead to total system compromise. The likely attack vector is local privilege escalation or a trusted module that can invoke the buggy path.