The Linux kernel’s PSP network driver contains a race condition where a device can be unregistered during the creation of an association, even though a lock is expected to prevent this. The missing check can cause a use‑after‑free that leads to memory corruption, kernel panic, or privilege escalation. This weakness is identified as a race condition that triggers a use‑after‑free vulnerability.

Linux kernel versions that include the PSP network driver before the commit that added the proper device‑registration check. Specific release numbers are not listed in the advisory.

The CVSS score is not provided and the EPSS score is unavailable, so the likelihood of exploitation cannot be factored. The vulnerability is not listed in CISA’s KEV catalog. Attackers would need to exploit the race condition by triggering a device unregistration during a call to psp_assoc_device_get_locked, likely requiring local or privileged access to send crafted network traffic. No public exploit is known, so the risk remains uncertain, but the potential impact warrants prompt remediation.