The kernel’s CDNSP USB driver allocates a stream context array in cdnsp_alloc_stream_info(). When a later stream ring allocation or stream mapping update fails, the error path frees the stream rings and the stream_rings array but mistakenly leaves the stream context array allocated. This memory leak can accumulate over time, draining kernel memory and ultimately triggering an out‑of‑memory condition that will lead to a kernel panic or forced system reboot, effectively denying availability.

The vulnerability resides in the Linux kernel’s CDNSP USB subsystem. Any kernel that includes the unauthenticated cdnsp_alloc_stream_info() code before the recent patch is affected, including the 7.2 release candidates rc1 and rc2. Systems running older kernels or those that do not install the vendor‑supplied fix remain at risk until the kernel is updated.

The EPSS score is below 1% and the vulnerability is not listed in CISA’s KEV catalog, indicating a low probability of realworld exploitation. The CVSS score of 5.5 points to moderate severity. An attacker would need local access that allows interaction with the USB subsystem, for example by feeding a device that forces a stream allocation failure. In practice, the risk is confined to availability damage rather than compromise of confidentiality or integrity.