A memory leak in the Linux kernel’s au1200fb driver occurs when the probe function encounters an IRQ retrieval failure. The driver returns prematurely without freeing allocated resources, leading to an incremental leak that may deplete kernel memory over time. While the issue does not grant direct control or data exfiltration, sustained exploitation can cause a denial of service by exhausting memory available for the OS and other processes.

The vulnerability affects the Linux kernel, specifically the au1200fb framebuffer driver on the Atheros Auna 1200 platform. The affected kernels include the 6.5 series and its release candidates (rc3 to rc7). No other vendors or product variants are listed as impacted.

The CVSS score is 5.5, indicating moderate severity. The EPSS score is less than 1%, which points to a very low but nonzero exploitation probability, and the vulnerability is not listed in the CISA KEV catalog, meaning no confirmed exploitation in the wild. The attack vector is inferred to be local, as the memory leak only occurs when the hardware device is probed during kernel initialization. Exploitation would require a user who can influence the device’s presence or trigger a kernel reboot to force the probe again, keeping the risk low relative to more direct exploits. Nonetheless, the lack of cleanup can lead to service interruption if left unpatched.