In the Mediatek Gen3 PCI controller driver on the Linux kernel, IRQ domains are allocated before the controller’s IRQ is retrieved. If the IRQ retrieval fails, the function returns immediately without freeing the allocated IRQ domains. The result is a kernel resource leak, which can consume memory and kernel resources over time and may eventually lead to a denial‐of‐service condition.

All Linux kernel builds that incorporate the Mediatek Gen3 PCI controller driver are affected until the issue is fixed. No specific kernel releases were enumerated, so any system running an unpatched build with this driver should be considered at risk.

The EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating low exploitation likelihood. The bug is a kernel‑level resource management flaw that is only triggered during driver initialization; based on the description, it is inferred that an attacker would need to have privileged access to the system or the ability to load the driver. The limited exploitation surface, combined with the low EPSS, suggests that the immediate threat is low, but repeated invocations could degrade system stability.