The Linux kernel's FPGA subsystem contains a use‑after‑free bug in the child_regions_with_firmware() function. After freeing a child region node, the code later references it during an error print. This flaw can cause the kernel to access memory that has already been released, potentially leading to memory corruption issues.

This vulnerability applies to all Linux kernel builds that include the FPGA subsystem unmodified from the commit that introduces the bug and that do not yet contain the fix identified in the advisory. The relevant commit is 070b0ce947b18fa3dec0729695147f7e19599649, and any kernel version prior to its inclusion is affected. The CPE entry reflects all Linux kernel products, so every distribution kernel that ships the FPGA module and lacks the patch is potentially vulnerable.

The CVSS score of 7.8, combined with an EPSS score of < 1 % and a status outside CISA's KEV catalog, indicates high severity but very low exploitation probability. The likely attack vector involves local access to the FPGA firmware interface, requiring the attacker to trigger the buggy code path. The overall risk remains low to moderate compared to the severity metric, largely because the vulnerability is confined to kernel memory corruption when the FPGA subsystem is accessed.