The fsl/fman driver in the Linux kernel contains a bug where the read_dts_node() function acquires a clock reference via of_clk_get(), which increments the reference counter, but never releases that reference. Because the clock object is not stored elsewhere, the reference count cannot be decremented later, leading to a persistent reference‑count leak. Over time, repeated invocations of read_dts_node() can exhaust kernel clock resources, potentially causing subsequent clock lookups to fail or a kernel out‑of‑memory condition. The flaw is confined to kernel mode and does not directly enable remote code execution or data exfiltration, but it can degrade availability by triggering resource exhaustion.

The issue emerges in any Linux kernel build that includes the fsl/fman driver. The specific kernel editions and revisions affected are not enumerated, but the fix appears in the stable kernel tree. Systems employing embedded or industrial SoCs that run Linux kernel versions with this driver – such as many network and server devices using fsl/fman – would be impacted if the kernel has not been updated.

EPSS data is not available and the vulnerability is not listed in CISA KEV, indicating no known public exploitation. The flaw requires repeated local, privileged execution that triggers read_dts_node() to accumulate clock references. Consequently, the risk is moderate: a local user or firmware with control over the driver can induce resource exhaustion, potentially leading to denial of service. The absence of a high exploitation probability and public exploits lowers the urgency but still warrants prompt patching.