The Linux kernel rtl2832_sdr driver contains a flaw in its start_streaming() routine. When this function fails, it fails to return queued buffers to the vb2 framework, triggering a WARN_ON check and leaving those buffers leaked. The consequence is a memory leak. Based on the description, it is inferred that this leak could accumulate over repeated failures, potentially exhausting system memory and causing a denial of service. The issue arises from multiple early return paths that bypass buffer cleanup; the patch introduces an explicit success exit and attaches helper cleanup logic on error.

The vulnerable code resides in the Linux kernel’s rtl2832_sdr driver, which supports RTL2832‑based software‑defined radio devices such as RTL‑SDR dongles. No specific patch levels or kernel versions are listed, so all kernels containing this driver before the fix are affected.

The CVSS score is not provided and the EPSS score is unavailable, but the leak can be exploited locally by repeatedly causing start_streaming() to fail, leading to resource exhaustion. Based on the description, it is inferred that the vulnerability requires local access to the device and is not remotely exploitable. It is not listed in the CISA KEV catalogue, indicating no known widespread exploitation, yet the lack of cleanup poses a meaningful risk for systems relying on frequent SDR activity.