This vulnerability is a use‑after‑free in the Linux kernel’s RAID5 PPL subsystem. When a flush operation completes, the code continues to iterate the loop even after the I/O unit has been freed, dereferencing a dangling pointer. The patch inserts a break statement to stop the loop once the I/O structure is freed, preventing memory corruption. If remediations are not applied, the flaw can corrupt kernel memory, potentially leading to a system crash and, if an attacker can influence the vulnerable code, to local privilege escalation or kernel‑level code execution.

All Linux kernel releases that incorporate the RAID5 PPL code prior to the fix are affected. The CVE does not list specific kernel versions, but any compiled kernel containing the vulnerable md raid5 PPL module before the patch is at risk, including the standard distribution kernels and custom builds that have not been updated.

The vulnerability carries a CVSS score of 7.8, indicating high severity. The EPSS score of 0.00149 (<1%) indicates a very low probability of exploitation, and the issue is not listed in CISA’s KEV catalog. The CVE description does not detail how an attacker might trigger the use‑after‑free, but the affected loop performs a flush operation on a RAID5 PPL unit. It is inferred that exploitation would require the ability to invoke a RAID5 flush operation—or otherwise trigger that code path—on a system running a vulnerable kernel. From this inferable standpoint, an attacker could cause kernel memory corruption, leading to a system crash or potential privilege escalation if the kernel is compromised. Attacks that rely solely on external triggers are not explicitly documented in the CVE, so the likelihood of remote exploitation remains uncertain.