The net2280 USB gadget driver in the Linux kernel contains a double‑free bug that occurs when the probe routine fails. During a probe error, the driver calls net2280_remove(), which frees the device structure and drops a gadget reference. Subsequently, the explicit kfree() call in the error path attempts to free the same object again. The second free corrupts kernel memory. This double‑free flaw (CWE-415) and the resulting incorrect use of allocation logic (CWE-1341) can cause a kernel panic or other system instability.

Any Linux kernel that contains the net2280 gadget driver without the recent fix is vulnerable. Kernel versions 7.1 release candidates rc1 through rc5 are explicitly listed in the affected CPE set, so those releases are affected. In addition, any other mainline or distribution kernel builds that include the driver remain at risk until updated.

The CVSS score of 7.8 indicates moderate‑to‑high severity. The EPSS score is below 1 % and the vulnerability is not listed in CISA’s KEV catalog, indicating a low probability of exploitation in the wild. Exploitation would require an attacker to supply a USB gadget that triggers a probe failure, implying physical access or control over the device. The most likely outcome is a kernel crash; no documented exploit chain or privilege escalation logic is present in the current data.