This vulnerability involves a memory leak in the Linux kernel's Renesas I3C master driver. The xfer structure allocated by renesas_i3c_alloc_xfer() is never freed in the renesas_i3c_i3c_xfers routine, allowing memory to accumulate with each transfer. Over time this leak can exhaust the system's memory, potentially leading to system instability or a denial‑of‑service condition for legitimate workloads.

The affected products are all Linux kernel releases that contain the unpatched renesas I3C master driver code. There are no specific version ranges given, but the fix is available in the kernel commits referenced in the advisory. System administrators should verify that their kernel image incorporates the latest upstream patch set or the identified commit identifiers.

Based on the description, it is inferred that a local attacker or one with privileged access can trigger the leak by repeatedly initiating transfers on the Renesas I3C master interface. No EPSS score is available and the flaw is not listed in CISA's KEV catalog, indicating that, while exploitable, it has not yet been observed in the wild. The lack of a CVSS score suggests the severity is uncertain, but memory exhaustion in the kernel space is a high‑impact flaw that should be addressed promptly.