The flaw occurs when the Asynchronous Sound Architecture SDCA component fails to correctly balance runtime power management references in its probe function, creating an unbalanced counter that can leak resources or lead to a kernel crash. The issue stems from missing error handling code that would normally decrement the PM counter on probe failure. This deficiency corresponds to the security weakness represented by CWE‑398.

All Linux kernel builds that include the SDCA module of the ASoC subsystem are affected. No specific kernel release is mentioned, so any kernel that contains this code path could potentially be impacted.

The CVSS score is not provided and the EPSS score is unavailable, so a quantitative determination of exploitation likelihood cannot be made. Based on the description, it is inferred that an attacker with local privileges who can load or unload kernel modules might trigger the flaw by forcing the SDCA module’s probe to fail, which could result in kernel instability. Because the vulnerability is not listed in the CISA KEV catalog, no widespread exploitation has yet been reported.