The vulnerability is a memory leak in the Mediatek SVS driver for the Linux kernel. In svs_enable_debug_write(), a buffer allocated with memdup_user_nul is not freed when kstrtoint() fails, causing an unreleased memory allocation. This results in a repeated leak that can eventually exhaust kernel memory and destabilize the system, falling under CWE‑401.

Any Linux kernel configuration that includes the Mediatek SVS module is affected. No specific kernel version range is listed, so all builds containing this code prior to the reported fix are potentially vulnerable.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating limited public exploitation data. The CVSS score is missing from the advisory. The attack vector is inferred to be local, as svs_enable_debug_write() is a debug interface that typically requires root or elevated privileges. A privileged attacker could repeatedly trigger the function, causing progressive memory exhaustion and a denial of service. While no public exploit exists, the potential for a serious local DoS warrants immediate attention.