An uninitialized DMA mapping leak in the Linux kernel’s hpsa SCSI driver occurs when phys_disk->in_reset is true; the code path returns before freeing previously acquired resources such as the IOACCEL2 scatter‑gather chain, the SCSI command, and the outstanding command count. The missing cleanup causes the kernel to retain DMA mappings and decrement counters, leading to kernel memory exhaustion or system instability. This is a resource‑leak type vulnerability (CWE‑772).

The vulnerability affects all Linux kernel builds that include the hpsa SCSI driver and have not yet applied the patch. No particular versions are specified, so any version that contains the unpatched driver is potentially vulnerable.

The CVSS score of 5.5 and EPSS score below 1% suggest moderate severity but low exploitation probability. The risk is not listed in CISA’s KEV catalog. Exploitation would require triggering a reset through the device or reaching the fault path, which generally needs kernel privileges or the ability to command the device to reset. Repeated resets could deplete kernel memory, causing a denial of service.