The Linux kernel TPMI driver contains a flaw in mem_write() where a temporary array returned by parse_int_array_user() is not freed on all exit paths. This omission results in a memory leak that can accumulate and deplete kernel memory, potentially leading to a denial‑of‑service condition. The weakness is classified as a resource exhaustion vulnerability (CWE-772).

Linux kernel builds that include the unpatched TPMI driver are vulnerable. All machines running a kernel version prior to the commit that introduces cleanup helpers in mem_write() are potentially affected, regardless of distribution or specific kernel release.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of < 1% suggests that exploitation in the wild is unlikely. This vulnerability is not listed in the CISA KEV catalog, further indicating low exploitation risk. The attack likely requires user or privileged interaction with the TPMI driver, as the memory leak is triggered by passing data to mem_write(). Because the driver operates in kernel space, an attacker would need a path to invoke mem_write(), potentially through a crafted device or privileged process. Once triggered, repeated usage could exhaust memory, leading to system instability or reboot.