Technical impact
A flaw in the Linux kernel Samsung DSIM bridge driver causes a memory leak when attaching a DSIM host. After the bridge is added, the driver registers a timing‑event IRQ and then attempts a hardware attach operation. If the IRQ registration or the attach fails, the code returns without removing the bridge or unregistering the IRQ, allowing the leaked objects to accumulate. Persisting memory leaks in kernel components can deplete system memory and eventually result in denial‑of‑service or system instability.
Affected Systems
Any Linux kernel that includes the legacy Samsung DSIM bridge code and has not yet incorporated the committed patch is affected. This includes all kernel versions that ship with the drm/bridge:samsung-dsim driver present until the error‑handling fix is applied.
Risk and Exploitability
The CVSS score of 5.5 indicates moderate severity, while the EPSS score is less than 1%, suggesting a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation of this flaw would most likely require local privileged access or the ability to interact with the kernel module, as the memory leak is triggered by normal operations of the DSIM bridge such as initializing or switching display modes. Remote exploitation without additional privilege escalation has not been described.
Ubuntu USN