The vulnerability arises from error-handling paths in the Linux kernel’s nvmem subsystem that call __nvmem_device_put(), a routine that frees the underlying memory and resources. After the free operation, the kernel continues to reference the released nvmem structure, creating a use‑after‑free condition that can corrupt kernel memory. If an attacker could trigger this flaw, the resulting memory corruption could potentially allow arbitrary code execution or privilege escalation; this conclusion is inferred because the description does not explicitly state the exploitability consequence.

All Linux kernel releases that contain the unpatched nvmem core are affected. The Common Platform Enumeration entries indicate that versions from Linux kernel 7.1 rc1 through rc7, as well as earlier stable releases, are vulnerable. Any vendor‑specific or custom kernel that compiles the nvmem subsystem without the patch is included, regardless of distribution.

The CVSS score of 7.8 denotes a high severity impact, while an EPSS score of <1% suggests that a successful exploit is unlikely, although it remains possible. The flaw is not listed in the CISA KEV catalog and no public exploits have been reported. Exploitation would require the attacker to trigger the error path in the nvmem subsystem, and while such an attack vector is possible, the practical likelihood is considered low at present. Nonetheless, the potential for significant kernel memory corruption warrants prompt remediation.