A use‑after‑free flaw in the Linux kernel Xilinx XADC driver causes an alarm IRQ handler to re‑queue delayed work after the device structure has already been freed. The vulnerability can lead to kernel memory corruption; an attacker could trigger a crash or potentially execute code with kernel privileges. The weakness corresponds to CWE‑416.

The flaw is present in any Linux kernel that includes the Xilinx XADC driver; the affected vendors and products are the Linux kernel wherever the xilinx-xadc driver is compiled and used. No specific version information is publicly disclosed beyond the fact that it has been identified in the upstream kernel and tracked by the referenced commits.

The exploit requires a user to cause the driver to be unbound while the IRQ handler is still active, which typically requires local privileged access or the ability to manipulate device binding. The CVSS score is 4.1, indicating low severity, and the EPSS score is less than 1%; the vulnerability is still not listed in CISA’s KEV catalog. The overall risk to systems loading the Xilinx XADC driver remains low, as the low CVSS score and minimal exploitation probability reduce the likelihood of a successful attack.