During initialization, the tg3 network driver registers an MDIO bus and connects a PHY when the USE_PHYLIB flag is enabled. If the subsequent probe fails, the error path releases device mappings and the network device but fails to unregister the MDIO bus and disconnect the PHY. This leaves underlying PHYLIB resources allocated, which can cause further probe attempts to fail, degrade device availability, and may ultimately exhaust kernel resources. The flaw arises from improper resource cleanup and is related to CWE-772.

Any Linux kernel distribution that includes the tg3 driver used on hardware requiring PHYLIB support. The vulnerability applies to all kernel versions that compile tg3 with the USE_PHYLIB option enabled, regardless of distribution or minor release.

The CVSS score of 1.9 and EPSS <1% classify this as low severity. Because the flaw appears only when the tg3 driver is probed, the likely attack vector is local interaction with the host system that initiates the driver load; this inference is drawn from the driver-level registration behavior described in the fix. The vulnerability is not listed in CISA KEV. An attacker who can repeatedly trigger probe failures could cause local denial of service by exhausting PHYLIB resources, but this remains limited to environments where the driver is frequently loaded under failure conditions. The risk is therefore modest and largely contingent on the exposure of the driver to local fault conditions.