A double free condition occurs in the OcteonTX2 PF representor initialization pathway of the Linux kernel. When the hardware resource setup fails, the code unwinds partially initialized queues before returning, and the same cleanup routine is invoked again, freeing the exact same resources twice. This leads to memory corruption within the kernel. Based on the description, it is inferred that such corruption could allow an attacker with sufficient kernel privilege to execute arbitrary code or cause a system crash, resulting in denial of service.

The vulnerability affects any Linux kernel build that includes the OcteonTX2 PF driver before the split‑cleanup fix. Reference commits were applied for the v6.13‑rc1 branch and remain in later snapshots such as v7.1‑rc3, indicating that kernels from those releases onward that have not incorporated the change are vulnerable. All systems running a Linux kernel version that contains the OcteonTX2 PF driver and have access to the representor hardware are at risk.

The EPSS score is <1%, and the vulnerability is not listed in the CISA KEV catalog, indicating a very low likelihood of real‑world exploitation. The CVSS score of 7.8 indicates high severity. Exploitation would require presence of OcteonTX2 representor hardware and code execution in kernel context, making it a niche threat. As a result, the overall risk is considered high, primarily affecting unpatched kernels that still employ the vulnerable driver.