A use‑after‑free condition exists in the Greybus raw driver of the Linux kernel. When a disconnect frees a connection object while a concurrent write still references it, the kernel dereferences a null pointer and panics. This is a classic memory corruption flaw (CWE‑416) that can abruptly bring the system down.

All Linux kernel variants that include the Greybus raw subsystem before the fix identified by commit 48d6c32bc049abd114e8f0836c0e7d7cbfba7827. No vendor‑specific product list is provided, and the CPE tracks the generic Linux kernel.

The flaw produces a local denial‑of‑service; the attacker must be able to issue write calls to the device file after the connection has been disconnected. Based on the description, it is inferred that this requires local write access to the Greybus raw character device, a privilege that is typically limited to root or privileged processes. EPSS data is not available and the vulnerability is not catalogued in CISA's KEV list, suggesting no publicly known exploits yet. Nevertheless, a kernel panic is severe enough to warrant prompt patching.