The Linux kernel contains an improper initialization flaw in usb gadget functionfs where the reset_work structure is not initialized until specific deactivation paths; cancel_work_sync called during unmount on this uninitialized work triggers a kernel warning that may have led to kernel panic or silent failure on older kernels, giving an attacker the ability to destabilize the system if they can trigger the unmount event.

This defect is present in all Linux kernel versions that have not incorporated the patch committing the initialization of reset_work in ffs_data_new(); affected systems include any device running a kernel older than the commit that introduced the fix.

Without the patch the vulnerability is exploitable only by an entity with the ability to execute privileged actions such as mounting and unmounting functionfs; the risk is that a kernel crash or system instability could occur, resulting in a denial‑of‑service condition. The CVSS score is not disclosed, the EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower but non‑negligible risk for environments where USB gadget functionality is used.