The vulnerability in the Linux kernel's idpf driver involves a use-after-free and double free condition triggered during error handling in auxiliary device addition functions (idpf_plug_vport_aux_dev() and idpf_plug_core_aux_dev()). When auxiliary_device_add() fails, the error path calls auxiliary_device_uninit(), which frees the device structure (iadev) via the release callback. However, the code then continues and attempts to access and free the same memory again, causing a double free and use-after-free. The fix involves freeing the IDA slot and clearing the back-pointer before calling uninit, preventing access to freed memory and avoiding double free.

Successful exploitation of this vulnerability could lead to memory corruption in the kernel, potentially allowing an attacker with local privileges to escalate privileges or cause a denial of service. The CVSS vector indicates local attack complexity and privileges required, with high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch links are provided in the data. Until a patch is available, avoid running untrusted code with privileges that can trigger this vulnerability.