The vulnerability resides in the Linux kernel's xHCI sideband driver, where a temporary pages array is allocated and then mistakenly not freed after building an sg_table. Each time a sideband client acquires an endpoint or event ring buffer, this unused array remains allocated, causing a cumulative memory leak. The leak does not expose confidential data but consumes system RAM, which can degrade performance or bring the system to a state where it is unable to allocate further memory, effectively leading to a denial‑of‑service scenario.

All Linux kernel configurations that are affected, regardless of specific device vendor. The affected releases are those that have not yet incorporated the commit that frees the pages array after a successful sg_table construction; exact version numbers are not provided in the advisory.

The EPSS score of less than 1% indicates a very low probability that this flaw will be actively exploited in the wild. It is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker would need to trigger repeated ring buffer allocations in a context that runs with kernel privileges or through a device that accepts user commands to obtain these buffers. Even if exploited, the impact is limited to memory exhaustion and system slowdown rather than arbitrary code execution or data disclosure.