A use‑after‑free condition was found in the Samsung Exynos PMU driver of the Linux kernel. During system boot the driver parses a device‑tree node for an interrupt generator, decrements its reference count too early using of_node_put(), and then later passes the freed node pointer to of_syscon_register_regmap(). This improper reference counting can corrupt kernel memory, potentially leading to a crash or silent memory corruption. The weakness is classified as CWE‑825.

All Linux kernel releases that contain the exynos‑pmu driver prior to commit 164313e24cb0f5 are affected. This includes distributions shipping those kernels for Samsung Exynos system‑on‑chips and any custom kernels compiled with the same driver code.

The CVSS score of 5.5 indicates medium severity, while the EPSS score of less than 1% shows a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require local or privileged access to modify the device tree or influence the boot process, making remote exploitation unlikely. Nevertheless, the presence of a use‑after‑free condition warrants prompt remediation.