A flaw in the Linux kernel EDAC subsystem for Altera devices causes the resource management group and related IRQ requests to be anchored to an intermediate per‑port structure instead of the long‑lived parent device. This mis‑association prevents the kernel’s devres framework from cleaning up those resources together, leading to a memory or IRQ line leak. The leaked resources can accumulate over time, exhausting kernel memory or depleting available interrupt lines and potentially causing a kernel crash or service interruption. No escalation or data‑exfiltration capability has been disclosed; the impact is limited to availability.

All Linux kernel builds that compile the EDAC/altera driver without the patch are affected. This includes distributions shipping kernels that contain the EDAC subsystem for Altera hardware and have not applied the fix introduced after the commit referenced in the advisory. Systems using kernel releases older than that commit date are vulnerable.

The EPSS score is not published and the vulnerability is not listed in the CISA KEV catalog. The CVSS rating is not provided, but the potential for resource exhaustion indicates a high severity. The attack vector is likely local, requiring privileged code execution or the ability to load the driver. An attacker with sufficient kernel access could repeatedly trigger the setup routine to deplete memory or IRQs, resulting in a denial of service. Because the exploit requires kernel‑level interaction, remote attackers with standard privileges are unlikely to be able to leverage it without additional compromise.