In the Linux kernel, the function thermal_of_cm_lookup() obtains a device node via of_parse_phandle() but never releases it, creating a reference leak (CWE‑772). This flaw can allow the kernel to consume progressively more memory each time the function is called, potentially exhausting system resources and resulting in a denial of service or kernel instability.

The vulnerability impacts the Linux kernel. The CNA did not provide specific version information, so any kernel that has not incorporated the remediation commit 025796c remains vulnerable. Distributions that have not applied the patch in their kernel packages are also at risk.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of < 1% suggests a very low probability of exploitation. The vulnerability is not listed in CISA's KEV catalog, indicating no publicly reported exploits. The likely attack vector is local: an attacker would trigger thermal_of_cm_lookup() repeatedly within the kernel, for example through thermal subsystem activity or related device drivers, but no active exploitation is documented.