A memory leak occurs in the Linux kernel’s af_unix module when a connection attempt to a Unix domain socket fails during prepare_peercred(). The failure prevents the new socket structure from being released, causing the kernel to retain the allocation. Over time, repeated failures can exhaust system memory and lead to instability or a denial of Service. The weakness manifests as inappropriate resource deallocation (CWE-772).

The vulnerability affects the Linux kernel; the specific kernel version is not listed in the data, so any installation containing the unpatched af_unix code is potentially vulnerable. Administrators should review the kernel build to confirm whether the patch that moves prepare_peercred() before unix_create1() has been applied.

The CVSS score is 5.5, the EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires the ability to trigger a Unix socket connection that follows the vulnerable code path, which can be accomplished locally or, if an exposed service uses Unix sockets, remotely. The risk is moderate to high for systems that handle many Unix socket connections, as resource exhaustion could be achieved with repeated failures, but public exploitation evidence is lacking.