The Linux kernel suffered a double‑free of a pseudo‑locked group’s RMID. The free list for RMIDs was incorrectly updated twice, corrupting the rmid_free_lru linked list. This kind of kernel memory corruption can allow an attacker to crash the system or, if exploited further, execute code in kernel mode.

All Linux distributions that include the resctrl subsystem of the Linux kernel are affected. No specific kernel version range is listed, so any release that has not yet applied the described patch is potentially vulnerable.

The CVSS score of 5.5 combined with an EPSS score of less than 1 % indicates moderate severity and low likelihood of exploitation. Based on the nature of a double‑free in kernel space, the risk is high because it can lead to memory corruption; however, the exploit requires privileged interaction with the resctrl filesystem, so an attack is likely to be local or require initial escalation. The vulnerability is not listed in CISA’s KEV catalog, suggesting no known widespread exploitation at this time.