The vulnerability occurs in the Linux kernel HID lg‑g15 driver when a scheduled work item is not cancelled during device removal. The work item accesses memory that has already been freed by the driver's devres mechanism, leading to a use‑after‑free condition. A successful exploitation could corrupt memory, potentially allowing an attacker with local or physical access to corrupt kernel data structures, crash the kernel, or achieve privilege escalation.

All Linux kernel installations that include the HID lg‑g15 driver (LG G15, G15 v2, and G510 models) are affected. The driver is distributed with the mainline kernel, so any distribution using a standard kernel build without the fix is vulnerable.

The CVSS score of 5.5 indicates a moderate severity. The EPSS of < 1 % and absence from the CISA KEV catalog suggest the likelihood of widespread exploitation is low. The attack vector is inferred to be local: an attacker would need to physically unplug the device while a work item is queued, or otherwise trigger the race condition through a card‑bus or USB event. No publicly available exploits have been reported, and the available mitigation is straightforward.