Impact
During initialization, the Linux icssm_prueth driver fails to release an allocated node when a property read fails, causing eth_ports can accumulate, potentially exhausting kernel memory and resulting in degraded performance or a crash. This is a memory resource leak problem, related to CWE-772, which denotes unsafe handling of allocated resources.
Affected Systems
The issue affects all Linux kernel builds that include the icssm_prueth driver. This driver is part of the TI network interface stack and is found in many distributions that ship hardware supporting this driver. The lack of version constraints means any kernel that has compiled or loaded this driver may be impacted.
Risk and Exploitability
Based on the description, it is inferred that an attacker would need to trigger the probe path for the icssm_prueth driver, likely requiring local access or a crafted packet to the affected Ethernet device. The EPSS score is below 1%, indicating a very low probability of exploitation. The CVE is not listed in the CISA KEV catalog and no public exploits are known. Given the low likelihood of exploitation and the resources needed, the overall risk is low, although the leak could affect system availability if left unmitigated.
OpenCVE Enrichment
Ubuntu USN