This vulnerability is a use‑after‑free flaw in the Linux kernel’s Distributed Switch Architecture (DSA) driver for MXL862xx devices. An MDIO CRC error triggers the work handler, which walks the DSA ports and closes their conduits. If the driver is being torn down, the switch unregisters and frees the dsa_port structures before the delayed work is cancelled. A CRC error that schedules the work during this teardown can therefore cause the work to run after the ports have been freed, dereferencing stale memory. The fault is also classified under CWE‑825, indicating that the improper release of critical data could be exposed. This kernel memory corruption can lead to a crash or potentially allow an attacker to execute code in kernel mode or gain elevated privileges.

All Linux kernel builds that include the MXL862xx DSA driver are potentially affected. The vendor list is simply "Linux" and no specific kernel version is enumerated in the CNA data, so any system running a kernel containing that driver path could be vulnerable until the fix is applied.

The CVSS score of 7.8 denotes a high‑severity flaw, and the EPSS score is reported to be below 1 %, indicating a low likelihood of public exploitation at present. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector involves inducing an MDIO CRC error, which could be triggered by abnormal traffic or a malicious device connected to the switch. The race condition between error handling and driver teardown further complicates the exploit, meaning that an attacker would need to time an error during a shutdown sequence to trigger the use‑after‑free. While the potential impact is severe—kernel corruption that can crash the system or provide privilege escalation—the estimated exploit probability remains low.