The Linux kernel’s dibs network driver contains a use‑after‑free and double‑free flaw in the handling of the dmb_clientid_arr array. When a dibs device is removed or when a device addition fails, the interrupt handler may still access the freed array, corrupting kernel memory and potentially leading to system instability or privilege escalation.

All Linux kernel builds that include the dibs driver prior to the patch are affected. The vendor is Linux; no specific version range is stated, so any kernel release lacking the patch could be vulnerable.

The EPSS score of less than 1% indicates a very low probability of exploitation, while the CVSS score of 8.8 reflects high potential damage. Based on the description, it is inferred that an attacker would need the ability to trigger the particular driver operations—typically requiring privileged or local system access—and must time the exploit while a pending interrupt remains active. The overall risk level for environments running the affected kernel and exposing the dibs subsystem is high.