In the Linux kernel, freeze listeners registered with the rust_binder subsystem are not cleared when the node reference count reaches zero, causing the listener to remain in internal data structures. This creates a reference‑count cycle that prevents the listener from being freed, leading to a memory leak. The weakness is classified as a memory‑leak caused by an unreleased reference, corresponding to CWE-911.

The issue affects Linux kernels that implement the rust_binder subsystem without the patch that removes freeze listeners on node removal. The CVE data does not specify a precise version range; affected systems are expected to be any kernel in which the rust_binder component has not yet applied the freeze listener clear fix.

The advisory lists an EPSS score of less than 1%, indicating a very low exploitation probability, and the vulnerability is not included in CISA KEV. No CVSS score is disclosed. The attack surface is limited to privileged or kernel-level operations that trigger node removal while a freeze listener remains registered; there is no documented user‑level entry point. Consequently, the risk is considered moderate: the primary impact is a memory leak that could, over time, degrade system performance or facilitate a denial‑of‑service if repeated.