The kernel routine avs_pci_probe is responsible for probing Intel AVS sound devices. If the helper function snd_hdac_ext_bus_get_ml_capabilities returns an error, the code as written ignores that result and proceeds without properly cleaning up the bus resources. When it succeeds but a later part of avs_pci_probe fails, the allocated hlink list is also left unreleased. These gaps mean that partially initialized bus structures or hlink entries can remain in memory, causing a memory/resource leak that can accumulate over time and degrade system stability.

Any Linux kernel that contains the Intel AVS (Audio System on Chip) driver and has not been patched to include the proper error‑path cleanup is affected. This includes all current mainline kernel releases until the commit that implements the cleanup is merged. The vulnerability is vendor‑agnostic within the Linux ecosystem, as the affected code resides in the kernel source tree under the ASOC sub‑system.

The CVSS score and EPSS value are not supplied, and the issue is not listed in the CISA KEV catalog. Based on the description, it is inferred that the bug requires local or privileged access to trigger a probe failure; remote exploitation is unlikely without additional privilege escalation. The primary effect is a non‑remediated memory leak, which could lead to resource exhaustion or system instability over prolonged operation. The lack of available metrics makes precise risk quantification difficult, but the vulnerability constitutes a moderate severity local privilege need with potential for cumulative impact.