The vulnerability resides in the Linux kernel's amba‑pl011 serial driver, where RS485 trigger high‑resolution timers may be scheduled after the driver’s interrupt request has been freed. When such a timer fires, it dereferences memory that has already been deallocated, resulting in a use‑after‑free that can trigger a kernel crash. The description does not explicitly state a crash, but a kernel panic is inferred from the described use‑after‑free. This weakness is identified as CWE‑825.

All Linux kernel versions that include the amba‑pl011 driver and have not applied the patch for the timer‑cancellation bug are considered at risk. Because the CVE does not list specific release numbers, all current releases shipping the default amba‑pl011 driver are potentially affected until the fix reaches the kernel tree.

The CVSS score of 7.8 indicates high severity, while the EPSS score of < 1% suggests a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require an attacker to trigger RS485 traffic that arms a timer and have that timer fire after the interrupt has been freed, a scenario that typically demands local or physical access to the target machine. The bug is a use‑after‑free flaw (CWE‑825) and could lead to a kernel panic rather than arbitrary code execution.