The Linux kernel driver for CX23885 audio hardware contains a flaw where an error path fails to call cx23885_alsa_dma_unmap(), leaving a DMA mapping unreleased. This leads to a resource leak; subsequent attempts to map or use the device may fail, potentially corrupting memory or exhausting kernel address space. The impact is that an attacker who can control the driver’s initialization or can trigger repeated failures could cause the system to become unstable or crash, affecting availability.

All Linux kernel installations that include the media driver cx23885, regardless of vendor. Any system running an older kernel that uses the cx23885 module is potentially affected; the problem does not appear to affect other drivers.

The vulnerability is a resource‑leak flaw (CWE‑401). No public exploit has been reported and it is not listed in CISA’s KEV catalog. The EPSS score is not available, so the likelihood of exploitation remains uncertain. However, because the flaw can lead to system instability or DoS, it should be treated with caution. The severity depends on whether the affected device is actively used; a server with no CX23885 hardware is not impacted even if the driver remains compiled.