The flaw occurs in the Rockchip DRM driver for the HDMI component. The driver allocates an internal encoder structure with devm_kzalloc during component binding, which is automatically freed when bindings are torn down. A cleanup routine later accesses this now-freed structure because the DRM device reference has already been released, causing a use‑after‑free. In a kernel context this anomaly can allow a local attacker to perform memory corruption that may lead to arbitrary code execution. The possibility of privilege escalation is inferred from the nature of the kernel use‑after‑free and is not explicitly documented in the advisory.

The vulnerability applies to the Linux kernel's Rockchip DRM driver, specifically the inno‑hdmi component. Any kernel build that contains the unpatched Rockchip HDMI code is affected; no precise version range is provided, so all current kernels with the buggy code should be considered at risk.

The CVSS score of 5.5 indicates medium severity for this kernel use‑after‑free. The EPSS score of < 1% shows a low probability of exploitation currently, and the vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require local access that triggers the driver unbinding process, so the risk to remote attackers is low; however, a local compromise could lead to privilege escalation. No publicly known exploit exists.