An error path in the kernel's Intel RAPL powercap subsystem causes a memory leak when a topology query returns a negative value. The allocation for a rapl_package object is not released, resulting in a cumulative memory leak each time the condition is triggered. This leak can exhaust available RAM, potentially leading to a denial of service if an attacker repeatedly causes the failure.

All Linux kernel installations that include the powercap Intel RAPL module are affected until updated to a release that contains the fix. The patch was applied in commit 3e9e9337e03be, so any kernel built before this commit is vulnerable. Users should check their distribution’s kernel version and apply the latest available update.

No public exploitation has been reported and EPSS data is unavailable, indicating a low likelihood of an existing remote exploit. However, the vulnerability is exploitable locally by triggering the error condition, which would allow an attacker to drain memory resources over time and ultimately cause a local denial of service. The risk is therefore a potential local DoS that warrants prompt patching.