The vulnerability is a use‑after‑free that occurs when the Airoha network driver deinitializes its NPU resources without waiting for all RCU readers to finish. Because read‑side sections can still hold references to the freed NPU, the kernel may subsequently dereference invalid memory, potentially leading to crashes or arbitrary code execution. This weakness is classified as CWE‑414 and involves misuse of RCU for pointer replacement.

All Linux kernel releases that include the Airoha driver before the introduction of the synchronize_rcu call are affected; the vendors affected are Linux kernel maintainers. No specific version list is provided in the CVE record, so any kernel with the older driver code is considered vulnerable.

The attack likely requires the ability to trigger network activity that involves the NPU while an RCU reader is active, which is typically possible for a local privileged or unprivileged user on the affected system. The EPSS score is <1% and the CVSS score is 5.9, indicating moderate severity, and the vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploits at the time of this analysis. Nevertheless, use‑after‑free bugs in the kernel can allow local privilege escalation or denial of service by corrupting kernel memory.