During initialization of the TI Video Processing Engine driver, a probe failure removes a required resource, causing the device registration function to succeed before the driver aborts. The error path does not trigger the driver’s remove callback, leaving the v4l2 device registered in the system. This improper cleanup can lead to a lingering device entry, potentially exhausting device table resources or causing inconsistent device state for clients that interact with the media subsystem.

The flaw resides in the Linux kernel’s media subsystem, specifically the TI VPE driver. All Linux distributions using a kernel build that includes this driver and has not yet applied the relevant patch are affected. No specific kernel version range is supplied in the data, so any kernel variant containing the buggy code before the commit can be impacted.

The CVSS score is not provided, and the EPSS score is unavailable, so the quantitative risk cannot be precisely measured. The vulnerability is not listed in CISA’s KEV catalog. The attack would likely require privileged access to trigger a probe failure or the ability to manipulate hardware parameters to force the missing vpe_top condition. Given the local nature of the fault and the lack of readily exploitable remote vectors, the overall risk is moderate, with potential for localized resource exhaustion or state corruption if exploited repeatedly.