The Linux kernel’s MTU3 USB gadget subsystem performs a DMA mapping before it verifies whether the host queue can accept another transfer. If the preparation of the transfer fails, the request is rejected—yet the DMA mapping that was established before the failure never gets unmapped. This dangling resource can be reused incorrectly by the kernel, potentially leading to memory corruption or exhaustion of DMA mappings. The weakness is characterized as an unreleased resource issue (CWE‑772).

All Linux kernel releases that include the MTU3 USB gadget driver are affected, because the code path runs when the driver is compiled in. No particular distribution or kernel version is singled out; any kernel build that contains MTU3 is vulnerable until the fix is applied.

Known vulnerability details give an EPSS score of less than 1 % and the vulnerability is not listed in CISA KEV, indicating a low probability of exploitation. Based on the description, it is inferred that an attacker would need to trigger a queue failure on a USB gadget connected to the local machine, which typically requires local access or a compromised USB host. Once the error path is exercised, the kernel could experience memory corruption or resource exhaustion, compromising system integrity or stability. The overall risk is therefore considered moderate: exploitation likelihood is low, but the impact of exploitation would be severe.