This vulnerability occurs in the Linux kernel’s MTD virt_concat subsystem. After the item’s concatenation structure is freed by mtd_concat_destroy(), the function mtd_virt_concat_put_mtd_devices() may still reference that memory. The resulting use‑after‑free can corrupt kernel memory, trigger a crash, or allow an attacker to execute arbitrary code with kernel privileges. The weakness is a classic use‑after‑free bug (CWE‑416).

The issue exists in all Linux kernel builds that include the MTD virt_concat driver before the patch that moves the call order. No specific vendor version is delineated; users should audit their kernel version against the commits referenced in the advisory or apply the corresponding upstream fix.

The CVSS base score of 4.1 and an EPSS score of <1% classify this issue as low severity. The use‑after‑free bug can allow a local or privileged attacker who can trigger MTD virt_concat operations to corrupt kernel memory, cause a crash, or potentially execute arbitrary code with kernel privileges. No remote exploitation path is documented; the likely attack vector is via direct interaction with MTD devices or other kernel interfaces that use virt_concat. This weakness aligns with CWE‑416 (Use‑After‑Free) and CWE‑825 (Incorrect Synchronization for Access to Shared Resource).