The rtw88 WiFi driver for USB devices contains a logic flaw where failures to submit a USB Request Block cause the completion callback to never run. Because the driver depends on that callback to free socket buffers and transaction control blocks, a failed USB write results in a memory leak of those objects. The vulnerability is an instance of unreleased resource usage (CWE-772) and can lead to gradual exhaustion of kernel memory over time, but it does not provide direct code execution or elevated privileges.

Systems running the Linux kernel with the rtw88 WiFi driver on USB devices are affected. No specific kernel version ranges are provided in the current data, but the issue has been observed during normal operation, device disconnect, and reconnect scenarios on kernels where the rtw88 driver is active.

The CVSS score of 5.5 indicates a moderate severity, and the EPSS score of less than 1% shows a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, requiring access to a system with the affected driver: an attacker could trigger repeated USB disconnect events or device failures to exhaust memory, resulting in denial of service once memory pressure hits critical thresholds. No network-based exploitation channel is evident.