The Linux kernel contains a memory‑leak flaw in mtd_parser_tplink_safeloader_parse() that is triggered when an allocation for a table entry name fails. The error path jumps to a label that does not free the intermediate buffer, resulting in kernel memory that is never reclaimed. Based on the description, it is inferred that an attacker could repeatedly invoke the tplink_safeloader parser to trigger the leak, potentially exhausting kernel space and causing a system crash or degradation of critical services.

All Linux kernel releases that ship with the tplink_safeloader parser—part of the MTD subsystem—are affected. No specific version range is listed; the defect was remedied by the commits referenced in the supplied patch set.

The EPSS probability is under 1% (approximately 0.00018) and the vulnerability is not in the CISA KEV catalog, indicating a low likelihood of widespread exploitation. Based on the description, it is inferred that an attacker would need either privileged or local access to repeatedly trigger the parser, so the threat is limited to environments where such access is feasible. Nevertheless, the resulting kernel memory exhaustion could lead to denial of service through out‑of‑memory conditions or a kernel panic.