In the Linux kernel, the GPIB USB driver contained a flaw where failure in ni_usb_setup_init during initialization left an allocated writes buffer unreleased, creating a memory leak. That leak can gradually consume kernel memory and can lead to degraded performance or system crashes. The code also returned an inappropriate error code, which may mislead callers but does not directly affect the leak.

All Linux kernel releases before the commit that fixes this issue, affecting any system that loads the GPIB USB driver. No specific kernel versions are listed, so any kernel that still contains the older implementation is susceptible.

The vulnerability does not permit remote code execution or privilege escalation. It is a local resource exhaustion flaw that can cause denial of service if an attacker repeatedly triggers the problematic initialization path via a user-space program that uses the GPIB USB device. Because the EPSS score is unavailable and it is not listed in KEV, widespread exploitation is unlikely, though a determined local attacker could exploit it to exhaust kernel memory.