A typo in the ati_remote2 driver caused callbacks for USB device attributes to be invoked with a pointer that actually refers to a usb_interface instead of a usb_device. This type confusion can lead to the kernel dereferencing an invalid usb_device pointer, potentially corrupting memory or crashing the kernel. If an attacker can control the sysfs attributes exposed by the driver, they could influence the corrupted data and achieve arbitrary code execution.

All Linux kernel users running a kernel revision prior to the commit that fixed the issue (b20d6bf8014b and the subsequent commit referenced in the advisory). The vulnerability affects the ati_remote2 driver on USB devices across distributions that ship the affected kernel version.

The vulnerability carries a high risk of kernel compromise, though publicly documented exploit evidence is not available and the EPSS score is not reported. The issue is not listed in the CISA KEV catalog, suggesting no widespread exploitation yet. Attackers would need local or USB device access to manipulate the sysfs attributes, and the accidental mis‑binding of the attribute handlers represents a classic type confusion that can destabilize the system or provide a foothold for privilege escalation.