The flaw resides in the pds_core driver where its teardown routine frees DMA buffers while leaving bus mastering enabled, allowing the device to write to freed memory. This results in a classic use‑after‑free condition that can corrupt kernel memory and serve as a foothold for executing arbitrary code with ring‑0 privileges.

All Linux kernel variants that incorporate the pds_core driver before the commit adding pci_clear_master() to pdsc_teardown() and pci_set_master() to pdsc_setup() are affected. Kernels that have not been updated to include these changes remain vulnerable until patched.

The CVSS score is 5.5, and the EPSS score indicates a very low, but non‑zero, likelihood of exploitation. The vulnerability is a kernel‑level use‑after‑free. The EPSS value of <1% suggests a very low probability that the flaw will be actively exploited. The likely attack vector is that an attacker controlling the device or a malicious driver could trigger the flaw, leading to memory corruption that might allow privileged code execution, as inferred from the description. The vulnerability is not listed in the CISA KEV catalog at this time.