When the Amlogic GXL crypto driver allocates a channel list and the allocation partially fails, the driver’s error path tears down the resources twice. The second teardown re‑enters crypto_engine_exit on an already destroyed worker, causing a slab‑use‑after‑free that crashes the kernel. This classic use‑after‑free (CWE‑416) can lead to kernel memory corruption, which, if exploited, could allow code execution with kernel privileges. The flaw was surfaced by KASAN during a reproduced failure on a test kernel.

All Linux kernel releases that include the amlogic_gxl_crypto driver before the patch assembly is applied are affected. The reproducer was triggered on v7.1; any kernel version earlier than the fix that shipped the corrected meson_allocate_chanlist logic is vulnerable. Device firmware or boards that load this driver during boot, such as Amlogic GXL‑based platforms, fall into this set.

No CVSS score is publicly available and EPSS is not released, but the vulnerability is a critical kernel memory flaw that produces a use‑after‑free. Exploitation would require local interaction with the driver’s probe path—an attacker would need to load or trigger the module, which can happen during device boot or manual module insertion. Because the flaw occurs in kernel space, a successful exploit could elevate privileges or crash the system. The vulnerability is not listed in CISA KEV, and no public proof‑of‑concept exploits have been disclosed, suggesting that the current exploitation risk is uncertain but the potential impact is high.