The idxd DMA engine driver fails to release the workqueue it creates when the driver object is freed. This missing resource release (CWE‑772) keeps kernel‑level workqueue structures allocated, creating a kernel memory leak. Based on the description, it is inferred that over time the unchecked accumulation can grow the kernel’s workqueue pool and potentially degrade system stability.

All Linux kernel installations that compile with the idxd driver enabled are affected. Versions that exclude the idxd driver or disable it do not experience this issue.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of < 1% suggests a low likelihood of exploitation. The vulnerability is not listed in CISA KEV. Based on the description it is inferred that an attacker would need local or administrative privileges that allow loading or unloading the idxd kernel module to trigger the leak. In environments where such privileges exist, repeated unloading of the driver could lead to kernel resource exhaustion and a potential denial of service. Overall risk remains moderate, pending any changes in privilege availability or exploitation activity.