The Linux kernel Nouveau driver contains a reference leak in the nouveau_connector_detect function. When the nvif_outp_edid_get call fails, the routine exits without releasing the runtime power management reference it had taken. As a result, the device remains powered on until a succeeding successful detection, which may lead to unnecessary energy consumption or thermal issues. The underlying weakness is improper resource handling, classified as CWE‑668. There is no direct mechanism for attacker control; the flaw manifests during normal device operation. The risk is confined to scenarios where EDID retrieval fails repeatedly, which can occur when displays or cables are unstable or faulty.

All Linux kernel versions that include the Nouveau graphics driver are affected. The issue is not vendor-specific; it applies to any distribution that ships a kernel with the default Nouveau driver. No specific kernel release numbers are listed. Administrators should confirm whether their system kernel includes the nouveau_connector_detect function and whether the EDM retrieval path can fail during normal operation.

The flaw is an internal error that does not expose external attack vectors such as remote code execution or privilege escalation. The CVSS score is not supplied, and the EPSS value is unavailable, which suggests limited exploitation evidence. The vulnerability is not listed in the CISA KEV catalog. Because the problem surfaces during routine hardware detection, the exploitability is low for an attacker without physical access. The primary concern is the unintended continuous power draw, which could contribute to higher energy costs or thermal stress over time.