A memory leak was identified in the Linux kernel airoha driver when processing non-linear socket buffers in airoha_qdma_rx_process(). Errors such as invalid packet payload lengths or exhaustion of buffer fragments cause the driver to skip returning a page pool fragment to the pool, leading to gradual consumption of kernel memory. Over time this can deplete available memory, resulting in system instability or a denial of service. Based on the description, it is inferred that a remote attacker could send crafted packets to the NIC, triggering the error path and the memory leak.

The flaw affects any Linux kernel installation that includes the airoha driver for QDMA network interfaces. Specific kernel versions are not listed, so any supported kernel running that driver is potentially vulnerable until the fix is applied.

The CVSS score of 5.5 indicates a moderate severity risk, and the EPSS score of < 1% suggests a very low exploitation probability. Based on the description, it is inferred that an attacker could craft packets to the vulnerable NIC, triggering the error path and causing memory exhaustion, making this a moderate-risk denial of service vulnerability. The vulnerability is not listed in CISA’s KEV catalog, indicating no known active exploitation at this time.