The flaw in the s390/vfio_ccw subsystem prevents all allocated memory from being released when the cp_init() routine fails. The cp_free() helper is only invoked on successful I/O completion or prefetch failure, but a failed initialization that leaves cp->initialized unset bypasses this cleanup path, leaving CCW segments in memory. If left unchecked, this corrupted state can cause a memory leak event that may grow until the kernel runs out of available memory or swaps, potentially disrupting normal operation. The weakness maps to CWE-401 – Memory Leak.

The vulnerability is confined to Linux kernels running on IBM S/390 (s390) hardware, affecting the vfio_ccw driver. No specific kernel version information is supplied, so any installation using this driver may be susceptible until the fix is deployed.

With no EPSS or KEV data, the risk remains uncertain but the CVE’s nature suggests a moderate likelihood of exploitation when privilege and disk I/O conditions allow a CP initialization sequence. An attacker who can cause repeated cp_init() failures could trigger continuous memory leaks, potentially resulting in a denial‑of‑service condition. Because the vulnerability resides in kernel code, a local or privileged attacker would be required to initiate the failure scenario. No direct exploit references are available, so the likelihood of immediate exploitation is low, but the impact of a successful attack would be significant in terms of system availability.