The Linux kernel media driver for the TW9906 I2C device contains a memory leak introduced during error handling in the probe function. Memory allocated via v4l2_ctrl_handler_init and v4l2_ctrl_new_std is not freed in an error path, allowing an attacker to gradually consume system memory, potentially leading to denial of service or system instability. This weakness corresponds to CWE-401.

The flaw resides in the Linux kernel, specifically in the tw9906 driver within the media subsystem. The affected kernel versions are not explicitly specified, so any kernel release that includes this driver prior to the commit that fixes the leak is vulnerable. Systems running a Linux kernel version that still contains the problematic tw9906_probe implementation without the v4l2_ctrl_handler_free call are impacted.

No EPSS is available and the vulnerability is not listed in the CISA KEV catalog, so it is not known to be actively exploited today. The absence of a publicly known CVSS score suggests moderate risk; the memory leak could be exploited by a local attacker with sufficient privileges or by an attacker who can force the kernel to load the TW9906 driver, such as through a malicious I2C device. The actual impact requires sustained conditions and is less likely to be a high‑impact vector, but provisioning for an eventual denial of service is prudent.