The vulnerability originates from the Linux kernel’s OcteonTX2 Platform Firmware driver. During device initialization the driver allocates SQ aura and pool resources, and if a later setup step fails, the err_free_sq_ptrs routine frees only the SQB pages while leaving the per‑SQ sqb_ptrs arrays – which hold pointers to those pages – undeallocated. The residual pointers can expose kernel memory addresses to an attacker, enabling inference of kernel layout and assisting other attacks.

The flaw affects the Linux kernel’s octeontx2‑pf driver. Versions from the 6.13‑rc1 snapshot through at least 7.1.1 contain the bug. Any Linux system that loads this module and initializes OcteonTX2 hardware is impacted. The issue is an OS‑level kernel defect, not tied to a specific vendor beyond the upstream Linux kernel.

The EPSS score is reported as < 1 %, and the vulnerability is not listed in CISA’s KEV catalog, indicating a low exploitation probability. Exploitation would require the driver to enter its failure path, which typically occurs under rare hardware failure conditions or when an attacker can deliberately trigger the failure. Because the leaking pointers are kernel‑space addresses, the attack may provide valuable information for a subsequent privilege‑escalation exploit, but the level of attacker skill and environmental control required is high.