The Linux kernel’s GPIB driver contains a memory leak that occurs when a GPIB USB adapter is disconnected. The driver retains references to USB devices after a successful match, never releasing them. Over time, repeated connect and disconnect operations increase kernel memory consumption until a critical level is reached, potentially leading to kernel instability or a system-wide slowdown.

The flaw is present in the Linux kernel itself; no particular vendor or version is specified, so every kernel release that has not incorporated the patch could be affected. Users of any Linux system running a kernel that still includes the buggy GPIB driver are at risk.

The CVSS score of 5.5 indicates a medium severity risk, while the EPSS score of < 1% suggests a low likelihood of exploitation in the near term. The vulnerability is not listed in the CISA KEV catalog. The leak requires repeated disconnects of GPIB USB adapters to accumulate a significant memory drain, making immediate exploitation unlikely. However, sustained use of GPIB adapters over time can gradually degrade system reliability and may lead to a denial of service through kernel memory exhaustion.