The Linux kernel media driver for the TW9906 I2C device contains a memory leak triggered when the probe function follows an error path. In that path, memory allocated by v4l2_ctrl_handler_init and v4l2_ctrl_new_std is not released because v4l2_ctrl_handler_free is omitted. This flaw corresponds to CWE-401 and CWE-772. If repeatedly triggered, the leak can exhaust system memory, leading to a denial‑of‑service condition. The CVSS score of 5.5 reflects moderate risk for local impact.

The vulnerability is present in the tw9906 driver within the Linux kernel media subsystem. No specific kernel version is listed in the advisory, so any Linux kernel build that includes the unpatched driver is affected. The flaw resides in all distributions that ship the kernel with the incremental driver before the commit that adds the missing cleanup.

Based on the description, it is inferred that the attack vector requires the attacker to trigger the probe routine, which typically occurs when the TW9906 device is attached or when the kernel module is loaded. Therefore, an attacker with local privileges or the ability to present a malicious I2C device could force the driver into the error path repeatedly. The EPSS score of <1% indicates a low likelihood of exploitation, and the flaw is not listed in the CISA KEV catalog, so it is currently not known to be actively exploited. However, the moderate CVSS score warrants monitoring and planning for potential service disruption.