The flaw exists in the Linux kernel’s Intel Xway PHY driver where an Open Firmware (OF) node’s reference count is incorrectly left incremented when the driver checks for a child ‘leds’ node. Because the reference is never released, the node remains allocated, leading to a gradual consumption of kernel memory and an increase in resource usage. If the leak continues unchecked, it can cause system instability or a denial‑of‑service condition. This issue is classified as a resource leak (CWE‑772).

The vulnerability affects systems running Linux kernel 6.19, specifically the release candidates 6.19‑rc1 through 6.19‑rc6. The kernel’s Open Firmware node reference counting in the Intel Xway PHY driver is the component that is impacted.

According to the supplied CVSS score of 5.5, the severity is moderate. The EPSS score is below 1 %, indicating a very low probability of exploitation as of the last assessment. It is not listed in the CISA KEV catalog, further suggesting that no widespread exploitation has been reported. The likely attack vector is local and requires triggering the driver’s device initialization that performs the flawed ‘leds’ node check; thus it would be limited to users with kernel or device‑driver access. The overall risk remains moderate but likely low for most environments.