Impact
The irqchip/imgpdc driver in the Linux kernel allocates generic interrupt chips and sets up chained handlers during initialization, but fails to release them upon driver removal. The lingering generic chips remain on a global list and can be accessed by suspend, resume, or shutdown callbacks, creating a use‑after‑free condition that can crash the kernel. Additionally, dangling chained handlers may generate spurious interrupts that reference freed memory, further destabilizing the system. This vulnerability results in loss of availability or a kernel crash and is classified as a resource management flaw (CWE‑772).
Affected Systems
The flaw exists in the Linux operating system kernel. Affected products are all kernel builds that include the irqchip/imgpdc driver; specific version information is not provided in the CVE data, so all deployments that have not applied the recent commit patch remain vulnerable.
Risk and Exploitability
The EPSS score is listed as < 1 %, indicating a very low probability of exploitation in the wild. The vulnerability is not catalogued in the CISA KEV list, suggesting no known exploitation. The likely attack vector is local; an attacker would need privileged access to load or unload the driver or trigger driver removal events to activate the dangling references, which could lead to kernel crashes and availability loss.
OpenCVE Enrichment
Debian DLA