When the ixp4xx_hss driver probes, it allocates an HDLC network device twice. The first allocation is stored in a local variable, initialized, and registered, while the second allocation is stored in the device port structure and later used for unregister and free operations. This mismatch causes the driver to free a different object than the one registered, leaking the first allocation if the second fails and potentially deregistering an unrelated device. The result is a memory leak and an inconsistent cleanup path that can lead to kernel memory exhaustion or stability problems.

All Linux kernel configurations that build the ixp4xx_hss driver are affected. No specific kernel release is listed, so any kernel containing the driver prior to the patch is vulnerable. The fix applies to all such versions by allocating the HDLC netdev only once and assigning it to both pointers.

The CVSS score is 5.5 and the EPSS score is less than 1%; the vulnerability is not in the CISA KEV catalog. Based on the description, the likely attack vector would require kernel‑level access to trigger the allocation bug. Exploitation is inferred to need privileged or kernel‑level access to affect the driver’s allocation, so the likelihood of attack is low. The risk manifests as a resource leak that could degrade system performance or cause a crash under heavy network usage. Applying the patch removes the flaw and eliminates the risk of memory exhaustion and instability.