The vulnerability resides in the Linux kernel’s ASoC STI driver where regmap_field objects allocated during player initialization are never released. This oversight can cause memory or resource leaks that accumulate over time, potentially degrading system performance or crashing the kernel, thereby resulting in a denial of service.

The issue affects any Linux system that runs the affected ASoC STI driver. It applies generally to distributions that ship the upstream kernel version containing the un-managed allocation code; no specific version range is listed in the CVE data.

No CVSS or EPSS metrics are published, and the vulnerability is not listed in CISA KEV. Because the leak occurs only when the driver is removed or reinitialized, an attacker would need local system access and repeated load/unload cycles to exploit it. Although the exploit path is unlikely to be automated, prolonged exposure could lead to resource exhaustion and eventual denial of service.