Impact
During initialization, the Linux icssm_prueth driver fails to release an allocated node when a property read fails, causing eth_ports to accumulate, potentially exhausting kernel memory and resulting in degraded performance or a crash. This is a memory resource leak problem, related to CWE-401 and CWE-772, which denote unsafe handling of allocated resources and missing release of allocated memory.
Affected Systems
The issue affects all Linux kernel builds that include the icssm_prueth driver. This driver is part of the TI network interface stack and is found in many distributions that ship hardware supporting this driver. The lack of version constraints means any kernel that has compiled or loaded this driver may be impacted.
Risk and Exploitability
Based on the description, it is inferred that an attacker would need to trigger the probe path for the icssm_prueth driver, likely requiring local access or a crafted packet to the affected Ethernet device. The EPSS score is below 1%, indicating a very low probability of exploitation. The CVE is not listed in the CISA KEV catalog and no public exploits are known. With a CVSS score of 5.5 indicating moderate severity, the overall risk remains low, although the leak could affect system availability if left unmitigated.
OpenCVE Enrichment
Ubuntu USN