In the Linux kernel, the dw_i3c_master_i2c_xfers() function allocates a transfer structure but fails to free it when pm_runtime_resume_and_get() fails. This oversight creates a memory leak that can be triggered every time the i3c device controller performs an I2C transfer that encounters a runtime resume error. As the leaked memory accumulates, system memory pressure increases, potentially leading to degraded performance or a system crash, thereby causing a denial‑of‑service condition. The weakness is a classic memory‑leak scenario and does not directly provide code execution or privilege escalation.

The vulnerability affects all Linux kernels that include the dw i3c driver. No specific kernel versions are listed, so the issue may exist across multiple releases that compile the current dw_i3c master code.

The CVSS score of 5.5 indicates a moderate severity. The EPSS score of 0.00018 shows a very low exploitation probability. Because the flaw exists in kernel space, exploiting it would require the attacker to trigger a failed pm_runtime_resume_and_get() during an I2C transfer, which in turn would need interaction with the affected device, likely in a privileged or controlled context. The vulnerability is not listed in the CISA KEV catalog, indicating no known active exploits. However, the memory leak could still cause degraded performance or service disruption over time, so prompt remediation is advised.