During the removal of the Rockchip GPIO driver, generic IRQ chips allocated by irq_alloc_domain_generic_chips() are not freed because the domain flags lack IRQ_DOMAIN_FLAG_DESTROY_GC. This results in memory leaks of the domain generic chip structure and its associated generic chips, which remain registered on the global gc_list. Subsequent suspends, resumes, or shutdown callbacks may access these leaked objects, potentially triggering a use‑after‑free and causing a kernel crash. The vulnerability represents a use‑after‑free condition (CWE‑416) that can lead to denial of service.

The issue affects the Linux kernel’s Rockchip GPIO driver. Any system running a Linux kernel that incorporates the Rockchip GPIO subsystem and has had the driver loaded and later removed is impacted. No specific kernel version range is provided in the CVE data, so the vulnerability could exist in multiple releases that contain the unchanged driver code.

Because the exploit requires the driver to be removed, an attacker would need privileged or local access to trigger the removal path. No publicly available exploits are reported, and the EPSS score is not available, making the exploitation likelihood uncertain. The vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation. However, the potential for a kernel crash warrants caution, especially in environments where device removal is performed frequently or under untrusted conditions.