The vulnerability originates in the qla2xxx SCSI driver where, during allocation failures, a list of pointers is freed twice and some freed pointers are left dangling; subsequently the freeing routine attempts to free them again, including a NULL DMA pool handle. This double‑free and NULL pointer dereference can corrupt kernel memory and cause the kernel crash, potentially providing a foothold for further compromise if an attacker can trigger the allocation failure path. The flaw leads to instability and represents a serious kernel memory corruption issue.

All Linux kernel builds that include the qla2xxx SCSI driver prior to the patch commit. No specific affected version ranges are provided; therefore any kernel version shipping the vulnerable qla2xxx code is potentially impacted.

The CVSS score of 7.0 indicates high severity, while the EPSS score of <1% suggests a low probability of exploitation at the current time. The vulnerability is not listed in the CISA KEV catalog, indicating no known public exploits. The likely attack vector is local; it requires an attacker capable of interacting with the qla2xxx device or loading the driver, as the flaw triggers during kernel‑space device initialization or error handling. Given the kernel memory corruption nature, the flaw could lead to denial of service or local privilege escalation, although exploitation complexity is not quantified by the available data.