The Linux kernel contains a bug where a device‑tree node can be released before it is safely logged. When the node is freed, the subsequent formatting call still references it, resulting in a dereference of a freed pointer. This use‑after‑free can cause the kernel to crash and fall back to a kernel panic, providing a local denial‑of‑service surface for an attacker. The weakness is a classic Use After Free identified as CWE‑59.

All systems running the Linux kernel are impacted. No specific kernel version range is listed; the vulnerability exists where the mediatek pmdomain code path is present. Affected systems are those that load the mediatek device‑tree nodes and run the kernel commit that includes the vulnerability.

The CVSS score is not published and the EPSS score is unavailable, so the precise exploitation probability cannot be quantified at this time. The vulnerability is not listed in the CISA KEV catalog, indicating no confirmed exploits are in the wild. However, the use‑after‑free is a severe memory corruption flaw that could be leveraged by a local user with sufficient privileges or by a malicious driver that gains the ability to trigger the error paths. The likely attack vector would be a privileged attacker who can inject malformed device‑tree data or fail the regmap lookup to cause the crash.