The MT8183 AFE driver reserves memory when probed but never releases it on removal or probe failure. Each such event creates a memory leak that can accumulate over time. The leak may eventually exhaust reserved memory, destabilizing the kernel and potentially causing a denial of service. The flaw is a memory management bug (CWE-772) that does not provide direct code execution but can degrade system availability.

All Linux kernel builds that include the Mediatek MT8183 AFE driver without the patch are affected. The CPE indicates the entire linux_kernel product, and no specific version is listed, meaning any kernel version containing the vulnerable driver code is at risk.

The CVSS score of 5.5 indicates moderate risk, while the EPSS of less than 1% suggests a low likelihood of exploitation. The vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector is local kernel manipulation that allows repeated probe or module unloading, which could be exploited to cause memory exhaustion and a denial of service. No remote exploitation pathway is described.