The vulnerability is a use‑after‑free in the Linux kernel AMT subsystem. When an AMT device is removed, scheduled delayed work can still reference the freed amt_dev structure, leading to kernel crashes and memory corruption. The flaw is triggered by a race condition between device removal and the re‑queuing of delayed work from event work queues.

All Linux kernels that compile with AMT support (CONFIG_AMT=y) are affected. No specific kernel version is listed; therefore any build that includes the AMT driver should be considered vulnerable until the fix is applied.

The CVSS score of 7.8 indicates high severity because the bug can abruptly terminate the kernel and corrupt data. The EPSS score of <1% suggests a low probability of exploitation in production environments. The flaw requires a local or privileged attacker to exercise a race by removing a device while the kernel is performing AMT tasks, so it is not widely exploitable across the Internet. Based on the description, it is inferred that the attacker would need local or privileged access to trigger the race. The vulnerability is not currently listed in the CISA KEV catalog.