Kernel memory corruption that can lead to a crash or kernel privilege escalation. The bug exists in the Linux kernel's cdx module under the function cdx_create_res_attr. When the sysfs_create_bin_file() call fails, the function frees the res_attr resource descriptor but leaves the corresponding pointer in the cdx_dev->res_attr array unchanged. A later call to cdx_destroy_res_attr() attempts to free the same descriptor again, causing a double free. This double free can corrupt kernel memory and destabilize the kernel, potentially allowing an attacker to execute arbitrary code with kernel privileges.

All Linux kernel builds that compile the cdx implementation before the patch commit are affected. The issue is associated with the CPE cpe:2.3:o:linux:linux_kernel:* and vendor identifiers 'Linux:Linux'. No specific kernel version is listed, so any kernel with the unpatched cdx code, regardless of distribution, is potentially vulnerable.

The likely attack vector is local; an attacker must be able to trigger a sysfs file creation failure for a cdx device, which in practice typically requires privileged or root access. The CVSS score is not supplied, EPSS is not provided, and the vulnerability is not listed in CISA's KEV catalog. The description states that the double free can corrupt kernel memory and may crash the system or allow arbitrary code execution with kernel privileges, indicating high potential impact, although the likelihood of exploitation is unknown due to the lack of exploitation data.