A use-after-free flaw exists in the Linux kernel’s X25 subsystem when timer callbacks reference a socket that has already been freed during close. The flaw can cause the kernel to access invalid memory, potentially leading to a crash, data corruption, or privilege escalation. The weakness is an instance of improper memory deallocation (CWE‑416).

The vulnerability affects the Linux kernel. No specific kernel version range is provided in the advisories. All systems that include the X25 networking code and have the timers enabled are potentially susceptible.

Severity metrics are not supplied in the available data; no CVSS score or EPSS value is reported and the issue is not listed in the CISA KEV catalog. Exploitation would require presence of X25 support within the kernel, which would expose the vulnerable timers. An attacker could, by sending carefully crafted X25 packets or triggering the socket shutdown sequence, provoke the use‑after‑free, potentially causing a kernel panic or enabling further exploitation. The likely attack vector is remote network traffic over the X25 protocol, assuming the protocol remains active on the vulnerable system.