When the uss720 USB driver on Linux attempts to read the 1284 register during device probe, a failure path releases its private data and the USB device reference but fails to unregister the previously registered parport. This leaves the parport bus with a reserved number and a stale private data pointer. The resulting dangling pointer and resource leak could lead to kernel memory corruption or denial of service if the system later accesses the orphaned parport device.

All Linux kernel installations that contain the buggy uss720 driver and have not yet applied the fix are affected. The vendor identifiers are simply "Linux: Linux", indicating the mainline kernel. No specific version range is given, so any build containing the unpatched code path is at risk.

The EPSS score is less than 1 %, suggesting a very low likelihood of exploitation and it is not listed in the CISA KEV catalog. The CVSS score of 5.5 indicates moderate severity. The likely attack vector involves an attacker inducing a probe failure that leaves the parport registered. The flaw is primarily a local kernel issue; an attacker would need the ability to induce a probe failure and subsequently interact with the stale parport, which is a constrained attack surface. Nonetheless, the dangling pointer could trigger a kernel crash or memory corruption, leading to service disruption.