The vulnerability arises from a resource leak in the Linux kernel where an interface is not released when early registration failures occur. This flaw can cause accumulated unreleased memory or other kernel resources, leading to resource exhaustion and a potential denial of service. The weakness maps to CWE‑772, Suspicious Resource Deallocation.

All Linux kernel implementations are affected until a patched kernel is deployed. The vendor identified is Linux, with the product being the Linux kernel; specific version details are not provided in the available data.

The exploitability is limited to contexts in which an attacker can compel interface registration failures. Based on the description, it is inferred that the likely attack vector is either local code execution that interacts with the kernel interface or a remote exploitation path that forces the registration routine to fail. The CVSS score of 5.5 indicates moderate severity. The EPSS score of < 1% indicates a low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Despite the moderate severity and low exploitation probability, the potential for resource exhaustion means the risk remains significant if the failure path can be triggered repeatedly.