The vulnerability arises when the qla2xxx driver schedules a work item that later dereferences a qpair structure that has already been freed during adapter teardown. Because the work remains queued on the workqueue when the driver frees the qpair and the response queue, the executed work can access invalid memory. This use‑after‑free can lead to kernel memory corruption, potentially allowing an attacker to execute arbitrary code or to crash the system. The weakness is a classic use‑after‑free flaw (CWE‑825).

Any Linux kernel that incorporates the qla2xxx SCSI driver before the patch commit is susceptible. The advisory does not list specific kernel releases, so any unpatched kernel that has included the legacy qla2xxx code might be affected. The vulnerability is present only when the driver is active.

The CVSS score of 7.5 classifies it as high severity, and the EPSS score of <1% indicates a low probability of exploitation under current conditions. The vulnerability is not in CISA’s KEV catalog. Based on the description, it is inferred that an attacker would require local or privileged access to a system running the affected driver and the ability to influence the freed memory region. Accordingly, the risk is moderate for systems that rely on qla2xxx SCSI, but a remote attacker would need prior compromise or administrative foothold.