The Linux kernel ice driver contains a use‑after‑free bug caused by freeing a metadata_dst object without checking its reference count during representor teardown. This flaw is a classic CWE‑416 use‑after‑free and CWE‑825 improper cleanup vulnerability, and it can corrupt kernel memory if packets queued on the lower device still reference the freed object.

It is inferred that the affected systems are all Linux kernel releases that include the ice driver and contain the code prior to the patch commits referenced in the advisory. The affected code is part of the standard linux_kernel distribution; no specific version numbers are given, so any kernel that implements the ice driver before the commit needs to be updated.

The CVSS score of 4.1 reflects low severity. Combined with an EPSS score of less than 1% and the fact that the vulnerability is not listed in the CISA KEV catalog, exploitation is considered unlikely in the wild. It is inferred that the attack requires local access with control over network interfaces that host ice representors; an attacker would need to trigger representor teardown while packets are queued, leading to kernel memory corruption that could cause a denial of service or, in some scenarios, privilege escalation. Because the flaw is confined to kernel code and the damage requires a specific network state, the overall risk remains low but not negligible.