During the probe of the Mediatek DRM driver, an OVL adaptor platform device is registered when the display pipeline requires it. If subsequent initialization steps fail, the DRM resources are released but the adaptor device remains registered. This results in a resource leak where the kernel holds a stale device entry, potentially causing device accumulation and misreporting of available hardware resources. The vulnerability does not expose direct code execution or privilege escalation, but the lingering device could lead to configuration inconsistencies, increased kernel memory usage, or interference with legitimate devices.

The issue exists in Linux kernel releases that contain the Mediatek DRM driver before the patch. No specific kernel version range is provided, so any kernel built with the affected drm/mediatek code may be impacted.

The CVSS score of 2.3 indicates low severity, and the EPSS score of < 1% shows a very low exploitation probability. Because the flaw requires the driver to fail during initialization or removal, exploitability remains low and no public exploit is known. The vulnerability is not listed in the CISA KEV catalog. Consequently the risk level for environments that have not patched the kernel remains moderate, primarily due to potential resource exhaustion or device misuse.