A use‑after‑free flaw was introduced in the qcom_battmgr power supply driver of the Linux kernel. When the PMIC GLINK service becomes available, a worker is queued that later accesses the battmgr structure after the device‑managed resources are freed in the wrong order. This allows a local attacker to read or corrupt memory after the kernel has freed the battmgr object, which can destabilize the system or permit arbitrary code execution depending on the exploit context. The vulnerability is a classic use‑after‑free (CWE‑825) and is reflected in a CVSS score of 4.1 indicating a moderate local impact.

Any Linux kernel that includes the qcom_battmgr power supply driver is potentially affected, regardless of distribution. The fix resides in recent Git commits for the driver; systems running versions prior to the patch until the fix is applied remain at risk.

The CVSS score of 4.1 indicates moderate risk; the EPSS score of 0.00166 (approximately 0.17%) indicates a very low likelihood of exploitation in the wild, and the vulnerability is not listed in CISA KEV. Based on the description, it is inferred that the attacker must have local access capable of triggering the device‑managed resource sequence. Exploitation would require privileged local actions to manipulate the notification flow and provoke the use‑after‑free, making the opportunity limited to those with such access.