In the Linux kernel, the macb driver incorrectly retains a reference to the 'mdio' child node after a successful probe, leaking the reference each time the driver is initialized. This results in a cumulative reference‑count increase that constitutes a classic memory‑leak flaw (CWE-911). Over repeated bind cycles the leak can exhaust kernel memory, potentially causing system instability or a denial of service.

The vulnerability affects all Linux kernel releases that contain the macb network driver prior to the applied fix. It is not tied to a particular kernel version in the public data; therefore any kernel build with the unpatched macb driver code is susceptible.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the likely attack vector involves local or privileged attackers engaging in repeated hotplug or overlay removal actions on macb devices to trigger the memory‑leak. The exposure requires access that allows kernel module interaction, reducing the risk compared to remote exploitation, but repeated abuse over time could lead to resource exhaustion and system instability.