The Linux kernel drm/vc4 driver allocates an array of buffer objects (BOs) when a hang state is captured using kzalloc(), but this array is never freed when the hang state is released, resulting in a memory leak. This resource exhaustion condition (CWE‑401) along with the unreleased resource (CWE‑772) can cause kernel memory to be depleted over time, leading to an unresponsive system or reboot. The impact is a denial‑of‑service via uncontrolled memory consumption.

All Linux kernel releases that include the drm/vc4 driver and were built before the commit that adds the missing kfree() are potentially affected. No specific version range is supplied; therefore, any kernel with a hang‑state routine in the vc4 driver that does not contain this defensive free is vulnerable.

The advisory indicates an EPSS score of less than 1 % and lists no entry in CISA’s KEV catalog, suggesting a low likelihood of exploitation. An attacker would need to successfully trigger or induce multiple hang states to cause the cumulative leak, which may require privilege or access to the device. If the conditions are met, the loss of kernel memory could render the system unusable. The overall risk is considered moderate in severity but limited by the low exploitation probability.