Impact
A memory leak in the Linux kernel’s au1200fb driver occurs when the probe function encounters an IRQ retrieval failure. The driver returns prematurely without freeing allocated resources, leading to an incremental leak that may deplete kernel memory over time. While the issue does not grant direct control or data exfiltration, sustained exploitation can cause a denial of service by exhausting memory available for the OS and other processes.
Affected Systems
The vulnerability affects the Linux kernel, specifically the au1200fb framebuffer driver for the Atheros Auna 1200 platform. No specific kernel version is listed as affected, and the patch references are present only in the kernel source history without a defined release date.
Risk and Exploitability
The CVSS score is not provided, so the formal risk assessment is unavailable. The EPSS score is not reported, and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed exploitation in the wild. The attack vector is inferred to be local, as the memory leak occurs only when the hardware device is probed during kernel initialization. Exploitation would require a user who can influence the presence of the device or trigger a kernel reboot to force the probe again, making this a low‑confidence risk relative to more direct exploits. Nonetheless, the lack of cleanup can lead to eventual service interruption if left unpatched.
OpenCVE Enrichment