Impact
During late initialization of the t7xx CLDMA driver, a DMA pool is allocated before the transmit and receive rings are set up. If initialization of any ring fails, the error path releases the rings but forgets to release the DMA pool, causing a memory leak. This flaw can accumulate unreleased DMA buffers, eventually exhausting system memory and degrading or halting kernel operation.
Affected Systems
The issue exists in the Linux kernel wherever the t7xx wireless driver is compiled and loaded. All current Linux distributions running kernel versions prior to the fix are impacted; no additional vendor or product name was supplied, and version information is not available.
Risk and Exploitability
The vulnerability is a kernel‑level resource leak that can be triggered by a failure in the driver’s late‑initialization routine. Based on the description, it is inferred that an attacker with local privileges could repeatedly exercise this failure path and force the kernel to allocate unreleased DMA pools, potentially exhausting memory. The EPSS score is < 1% and the CVE is not listed in CISA KEV, indicating no known exploits at this time. The CVSS score of 5.5 reflects a medium severity. Nonetheless, the potential for memory exhaustion suggests a high risk if the flaw can be repeatedly triggered.
OpenCVE Enrichment