In the Linux kernel, a device_node reference returned by of_parse_phandle() is never freed in the EDAC/versalnet driver. The reference r5_core_node remains allocated on all exit paths, creating a memory leak. Over time, repeated invocations could accumulate unused memory, degrading system performance and potentially exhausting available memory, which may affect stability and availability.

The vulnerability affects the Linux kernel, specifically the VersalNet EDAC driver that handles hardware error detection on Versal Net devices. Any system running a kernel build that contains this driver and does not include the patch will be susceptible.

There is no reported CVSS score, EPSS score, or KEV listing for this issue, indicating that the public exploitation data is currently lacking. The risk is primarily tied to internal usage: a long‑running device that loads and unloads this driver repeatedly could accumulate memory usage, but there is no known external attack vector or privilege escalation from the leak. Consequently, the exploitation likelihood is considered low and the impact is moderate, limited to resource exhaustion.