In the Linux kernel’s RDMA/cxgb4 driver, a registration work queue (reg_work) can be scheduled while an RDMA device is simultaneously being removed. If the device context (ctx->dev) is freed while this work is pending or running, the registration routine may access the already‑deallocated memory, resulting in a use‑after‑free memory corruption. The flaw can cause kernel instability or a crash, potentially disrupting system availability. The bug was identified by static analysis and is fixed by cancelling the registration work before the device is freed. The weakness corresponds to CWE‑825.

The vulnerability applies to any Linux system that includes the cxgb4 RDMA driver within the kernel. The vendor list indicates Linux kernels themselves; specific kernel versions are not enumerated in the CVE data, so all builds that contain this driver are potentially exposed until a patch is applied.

The CVSS score of 5.2 indicates moderate severity. The EPSS score is less than 1%, indicating a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, implying no known active exploitation. Exploitation would require local access to the kernel to trigger a device removal while registration work is queued; the effect is expected to be a kernel crash or process termination rather than arbitrary code execution, as the description does not state such outcomes.