The vulnerability arises in the saa7134 video driver where two calls to saa7134_pgtable_alloc() fail but their return values are not checked. As a result the driver continues as if successful, leaving it with an invalid page table. Additionally, if vb2_queue_init() fails after the first page table has been allocated, the allocated memory is never freed, and the second allocation also lacks error handling. This leads to memory leaks and the use of uninitialized DMA resources, which can consume kernel memory over time and potentially cause kernel corruption or a denial‑of‑service. The weakness is represented by CWE‑401 (Memory Leak) and CWE‑399 (Improper Resource Shutdown or Release).

All Linux kernel installations that include the saa7134 media driver and have not applied the patch identified by commit 134c979dd721e22f196d71026432ee37d1f5cc38. The specific kernel version is not stated, so any kernel prior to the fix is considered vulnerable unless a later patch version is used.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating that it has not been widely exploited. The attack vector probably requires loading the saa7134 module or triggering a device probe that exercises the faulty allocation paths, which would normally be performed with root privileges. An attacker could repeatedly provoke allocation failures to exhaust memory and induce a denial-of-service, but this would require privileged access or the presence of vulnerable hardware. Overall the risk is moderate: the flaw does not, by itself, provide an arbitrary code execution path but can degrade system stability if repeatedly triggered.