The kernel’s IIO trigger subsystem does not cancel a deferred reenable work task before freeing the owning trigger object. After a hardware interrupt activates a work queue entry that touches the trigger, the trigger may already have been released, leading the worker to dereference freed memory. This use‑after‑free condition can be exploited to corrupt kernel memory and potentially execute arbitrary code, compromising confidentiality, integrity, and availability of the entire system.

The issue affects the Linux kernel. No specific major or minor release numbers are listed in the CVE data, but all kernel versions that implement the IIO trigger functionality and lack the described patch are susceptible.

The CVSS score is not supplied, and EPSS is not available, so the exact exploitation probability cannot be quantified. The vulnerability is a classic use‑after‑free flaw and is therefore considered high severity. Attacking it requires an adversary able to trigger the relevant IRQ and queue work on the system workqueue, implying a local privilege or kernel exploitation scenario. No publicly documented workarounds were provided, and the vulnerability is not listed in the CISA KEV catalog.