Impact
A failure in the drm/i915 module causes the kernel to leak memory when the query_perf_config_list() function is called and a reallocation fails. The leaked memory is not freed before the function returns, causing a gradual accumulation of unused memory objects. Over time this leak can degrade system performance, exhaust available memory, and potentially trigger a kernel panic if the system runs low on resources. The vulnerability is a classic memory-leak weakness and does not directly allow attackers to execute code or gain elevated privileges.
Affected Systems
The issue exists in the Linux kernel, affecting all distributions that ship the default kernel variant and use the DRM i915 driver. No specific kernel version range is listed in the provided data, so any kernel containing the unpatched drm/i915 code is potentially vulnerable.
Risk and Exploitability
The exploitability of this flaw requires the ability to invoke query_perf_config_list(), which is typically a privileged or kernel-level operation. The CVSS score is not disclosed; EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. Given the nature of the weakness, it is presumed to be a local vulnerability that can degrade availability over time rather than an immediate remote exploit.
OpenCVE Enrichment