The vulnerability is a memory leak in the wifi libertas driver’s firmware callback in the Linux kernel. After a successful asynchronous firmware load, the allocated firmware image is never freed, causing kernel memory to be consumed over time. If this path is invoked repeatedly—such as when a compatible USB Wi‑Fi device is attached or firmware is requested—the accumulated leak can exhaust available memory, degrade system performance, or trigger a kernel panic. This flaw does not directly allow arbitrary code execution but can compromise availability. The bug was confirmed through manual inspection and is regarded as a resource exhaustion weakness.

The issue affects Linux kernel builds that include the libertas USB Wi‑Fi driver, as identified in the current wireless tree and earlier releases around v6.13. Any system that loads this driver—particularly when a USB device requiring firmware is attached—can be impacted. No specific kernel version range is listed in the advisory, so all contemporary kernels containing the unpatched driver should be considered vulnerable until the patch is applied.

While a direct exploit requires the driver to access the firmware‑download path, the likely attack vector is a local user who introduces a compatible USB device or manually triggers firmware loading. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, indicating that exploitation potential is moderate and primarily a denial‑of‑service concern. The absence of a CVSS score limits precise severity grading, but the resource‑exhaustion nature suggests a medium risk for affected systems.