The vulnerability occurs when the Linux kernel’s rt1711h USB Type‑C driver registers a TCPCI port before validating that subsequent actions succeed. If the allocation of the interrupt or the enabling of alert interrupts fails, the driver’s probe routine exits without unregistering the port, leaving it registered and locked in kernel resources. This condition creates a memory/resource leak (CWE‑401) and exposes the kernel to a double‑unregister scenario on later driver detach, potentially destabilizing the system.

All systems running a kernel that includes the unmodified rt1711h driver are affected. The flaw exists in any kernel version that ships the driver as shipped, although specific version ranges are not disclosed in the CVE data.

The EPSS score indicates an exploitation probability of less than 1 %, and the flaw is not listed in CISA’s KEV catalog. The CVSS score of 7.8 reflects high severity, but the overall risk remains low to moderate because the attack surface is limited to local system or privileged users who could trigger a probe failure, such as by removing the device or forcing a driver reload. The flaw does not provide remote code execution or privilege escalation.