The kernel contains a use‑after‑free bug where the workqueue belonging to pds_core is destroyed before pdsc_teardown() finishes. This allows queued work to execute on a freed data structure, giving an attacker the ability to trigger arbitrary code paths or crash the system. The weakness is a classic use‑after‑free race that can compromise confidentiality, integrity, and availability if an attacker can trigger the race conditions described in the description.

All Linux kernel builds that include the pds_core driver and have not been updated to the commit that fixes the ordering of workqueue destruction and teardown. The affected code resides in the Linux kernel source under pds_core; any custom kernel builds or distributions with older kernel versions are potential targets.

The CVSS base score is 5.5, indicating moderate severity. The EPSS score is < 1%, suggesting a very low but nonzero probability of exploitation. The vulnerability is not listed in CISA KEV, indicating no known public exploits. Inference suggests that a privileged user or a malicious network attacker that can trigger the specific timing conditions described in the description could exploit the flaw, especially if the system interacts with devices managed by pds_core. The lack of existing exploits does not mitigate the underlying risk; the ordering bug remains a potential vector for code execution within the kernel space.