The ASoC STI driver in the Linux kernel has a memory leak flaw: regmap_field objects allocated during audio player initialization are never freed, especially when the driver is removed. Continued load/unload cycles can accumulate unreleased kernel resources, potentially exhausting memory, destabilizing the system, and in extreme cases causing a kernel crash or denial of service.

This vulnerability affects any Linux system that runs a kernel containing the unpatched ASoC STI driver code. The vendor list is generic (Linux: Linux) and no specific kernel version range is provided, which means any distribution shipping the affected driver without the devm_regmap_field_alloc change is potentially vulnerable.

The EPSS score of < 1% and the fact that this vulnerability is not listed in CISA KEV indicate a very low likelihood of exploitation. While the attack vector is inferred to be local, an adversary would need to repeatedly load or unload the driver to accumulate unreleased regmap_field objects. Although automated exploitation is unlikely, sustained misuse could exhaust kernel memory, potentially triggering a crash or denial of service. The CVSS score of 5.5 reflects a moderate severity, emphasizing the importance of resolving the memory leak to prevent long-term resource depletion.