The kernel contains a use‑after‑free bug where the workqueue belonging to pds_core is destroyed before pdsc_teardown() finishes. This allows queued work to execute on a freed data structure, giving an attacker the ability to trigger arbitrary code paths or crash the system. The weakness is a classic use‑after‑free race that can compromise confidentiality, integrity, and availability if an attacker can trigger the race conditions described in the description.

All Linux kernel builds that include the pds_core driver and have not been updated to the commit that fixes the ordering of workqueue destruction and teardown. The affected code resides in the Linux kernel source under pds_core; any custom kernel builds or distributions with older kernel versions are potential targets.

The CVSS base score is not disclosed, but the underlying use‑after‑free flaw typically receives high severity due to the potential for remote code execution. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, indicating no public exploits are known yet. Inference suggests that a properly privileged user or a malicious network attacker that can trigger the specific timing conditions could exploit the flaw, especially if the system interacts with devices managed by pds_core. The lack of existing exploits does not mitigate the underlying risk; the ordering bug remains a vessel for arbitrary code execution within the kernel space.