The flaw resides in the pds_core driver where its teardown routine frees DMA buffers while leaving bus mastering enabled, allowing the device to write to freed memory. This results in a classic use‑after‑free condition that can corrupt kernel memory and serve as a foothold for executing arbitrary code with ring‑0 privileges.

All Linux kernel variants that incorporate the pds_core driver before the commit adding pci_clear_master() to pdsc_teardown() and pci_set_master() to pdsc_setup() are affected. Kernels that have not been updated to include these changes remain vulnerable until patched.

No CVSS score or EPSS information is available, but the vulnerability is a kernel‑level use‑after‑free with an undefined but potentially high likelihood of exploitation. Based on the description, attackers with control over the device or a malicious driver could trigger the flaw, causing memory corruption that can be leveraged for privileged code execution. The vulnerability is not listed in the CISA KEV catalog at this time.