Impact
The Sunxi reset component in the Linux kernel fails to release a memory region when ioremap() fails, creating a resource leak. If an attacker can repeatedly trigger ioremap failures—by influencing the reset process or hardware configuration—they could exhaust kernel memory or cause stability issues, resulting in a denial of service. The core weakness is a missing resource deallocation, which jeopardizes integrity and system availability. This flaw does not directly provide remote code execution or privilege escalation but can serve as a vector for DoS attacks at the kernel level.
Affected Systems
All Linux kernel builds that include the Sunxi reset code are affected. No specific kernel versions or patch levels are listed, so the vulnerability may exist in any unpatched release using this code.
Risk and Exploitability
No CVSS or EPSS score is supplied, and the vulnerability is not listed in CISA KEV, indicating limited public exploitation visibility. The likely attack vector is local; an attacker with access to the device's reset process could induce ioremap failures. Consequently, the risk is Moderate to High for systems that rely on Sunxi hardware and where an attacker can influence reset events. The absence of an exploit path in the public domain does not eliminate the potential for local denial‑of‑service attacks via resource exhaustion.
OpenCVE Enrichment