The flaw occurs in the wilc1000 Wi‑Fi driver for the Linux kernel. During firmware download the driver allocates a DMA buffer with kmalloc() and is supposed to release it on failure. A bug caused the early failure path after the first bus acquire to return immediately, skipping the cleanup code and leaking the allocation. Over time, repeated failures could exhaust kernel memory or degrade system stability, resulting in possible denial of service.

Linux kernel builds that contain the wilc1000‑Fi driver. No specific kernel version range is indicated in the CVE entry.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% shows that exploitation is currently unlikely. The vulnerability is not listed in CISA KEV and no public exploits have been reported. Attacking the driver would require triggering a bus‑acquire failure in the firmware download routine, which typically means local or privileged access or the ability to supply malicious firmware. The attack vector is therefore limited, but the memory leak could be leveraged to force a denial of service if the failure path is repeatedly triggered.