The Linux kernel driver for the imx8mq USB PHY contains a flaw where the Type‑C switch resource is not released if probe obtains the TCA successfully but later fails. The driver relies only on its .remove() path for cleanup, which never runs on probe failure, leaving the Type‑C switch allocated. This results in a resource leak that can drain system resources and destabilize the device or the entire system. The issue is a Failure to Release Resource (CWE‑772). An attacker with sufficient privilege could trigger repeated probe failures, progressively exhausting resources and potentially causing a denial‑of‑service condition.

This flaw affects Linux kernel builds that include the fsl-imx8mq-usb PHY driver. Any distribution or custom kernel that incorporates this driver is potentially vulnerable; the specific version range is not detailed in the available data.

The CVSS score of 7.4 classifies the issue as high severity. The EPSS score indicates a very low probability at < 1%, and the vulnerability is not listed in CISA KEV. The description infers that the bug requires kernel execution or the loading of the driver during boot, indicating a local or kernel‑mode attack vector, with no remote exploitation path provided. The lack of cleanup leads to a local resource leak, granting an attacker the ability to create a denial‑of‑service condition by repeatedly forcing probe failures. Overall risk is high due to severity, yet exploitation feasibility is limited to privileged users or those who can influence kernel module loading.