The legacy Corsair CPro hardware monitor driver in the Linux kernel improperly registers debugfs files during probe. If the device registration fails, the driver fails to remove the debugfs entries, leaving dangling pointers that can be dereferenced when the file is read. This results in a use‑after‑free condition in kernel memory, which can cause a crash or provide an avenue for arbitrary kernel code execution.

All Linux kernel installations that include the Corsair CPro hardware monitor driver are affected. The exact kernel version range is not specified, but any kernel built with the hwmon:corsair-cpro driver before the patch contains the flaw.

The bug introduces a high‑severity use‑after‑free vulnerability in the kernel, but the CVSS and EPSS metrics are not publicly available. It is listed as not in CISA KEV, indicating it may not have known exploits yet. However, exploitation would require local access with sufficient privileges to read the offending debugfs file (typically root). The failure to clean up debugfs entries allows a locally privileged attacker to trigger the dangling pointer, potentially leading to a kernel crash or execution of arbitrary code.