The flaw resides in the USB iowarrior driver within the Linux kernel. When a device is disconnected, submitted write URBs are not stopped, which can trigger a use‑after‑free in the URB completion handler. This memory corruption could cause a kernel crash or, in the worst case, provide a path for an attacker to execute arbitrary code with kernel privileges. The description does not confirm a working exploit, but the nature of the bug clearly poses a high impact risk to confidentiality, integrity, and availability of the affected system.

Any Linux system that includes the iowarrior USB driver before the recent commit is subject to this vulnerability. The CPE information indicates that versions ranging from 2.6.21 (and its releases) through at least 7.2 release candidates are potentially affected, as well as all other general Linux kernel builds that contain the unpatched driver. If a kernel patch that stops URBs on disconnect is not present, the system remains vulnerable.

The CVSS score of 7.8 signals a serious severity, yet the EPSS score of less than 1% shows a low probability of current exploitation. The bug is triggered by a USB device disconnect, so the attack vector is likely local or physical; it does not appear to be exploitable over a network. Because no public exploit is listed and the vulnerability is not in the CISA KEV catalog, the immediate risk is moderate, but the potential impact warrants timely patching.