The Linux kernel ieee802154 ca8210 driver contains a flaw that leaks a cas_ctl structure when an SPI asynchronous submission fails. The driver allocates cas_ctl with kzalloc_obj and only frees it in the completion callback, which is never called on error. Each failed transfer consequently keeps roughly 600 bytes of memory allocated, and under sustained SPI bus contention this leak can accumulate to a significant amount of memory. The vulnerability does not provide an attacker with code execution or privilege escalation but can lead to resource exhaustion and degrade system stability, potentially resulting in a denial‑of‑service condition.

All Linux kernel distributions that include the ieee802154 ca8210 driver are impacted, including stock kernels and any custom builds that compile and load the driver module. The specific version range is not listed, so any kernel containing the vulnerable driver code may be affected.

The CVSS score of 5.5 marks this flaw as medium severity. The EPSS score of < 1% indicates a low likelihood of exploitation. The flaw is not listed in CISA KEV. An attacker would need local or device-level access to repeatedly trigger SPI bus contention, which could cause memory exhaustion and potentially lead to a denial‑of-service condition. The overall risk is moderate, with the primary impact being resource depletion rather than privilege elevation.