The flaw arises in the error‑cleanup path of iio_hw_consumer_alloc() where an iterator traverses a list while calling iio_buffer_put(), which can free the current buffer. The list traversal then dereferences freed memory, resulting in a use‑after‑free condition. This type of memory corruption is a critical kernel bug.

Linux kernel – all releases that have not yet incorporated the fix (commit 29783e6b6ec0b7152a15e53a063f17537e81177d). No specific version range is provided by the CNA data, so any Linux kernel build lacking the remedy is potentially vulnerable.

The CVSS score of 7.8 indicates medium‑to‑high severity, and the EPSS score of less than 1% suggests a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The CVE description does not specify an attack vector; however, since the flaw lies in kernel code handling IIO buffers, it is inferred that exploitation would likely require local privilege or the ability to trigger the error cleanup path in a running kernel. Successful exploitation would target kernel memory, potentially impacting system integrity or availability.