The Linux kernel contains a use‑after‑free bug in the /proc/allocinfo interface that becomes exploitable when a module is unloaded while a reader is iterating over allocation tags. The iterator state is cached between reads and, after the module’s memory is freed, the reader dereferences pointers that no longer point to valid memory. This corrupted memory can lead to arbitrary code execution or system compromise.

All Linux kernel releases that have not yet incorporated this patch are potentially affected. The vulnerability was fixed in the kernel source by correcting the iterator state handling during module unload. No specific version numbers are listed in the CNA data, so any kernel version before the patch commits is considered vulnerable.

The CVSS score is not provided, and there is no EPSS data, so the exact severity cannot be quantified from the available metrics. The vulnerability is listed as not in the CISA KEV catalog. The likely attack vector is local: an attacker with the ability to read /proc/allocinfo and to unload kernel modules (e.g., root or privileged users) could trigger the use‑after‑free. Successful exploitation would allow the attacker to execute arbitrary code in kernel mode, effectively achieving full system compromise.