The flaw occurs in the mlxsw_sp_flower_tmplt_create() function, where port range registers allocated during template parsing are never released because the cleanup path is missing. The leak accumulates each time a template is created, so on a busy system it can exhaust the limited pool of port range registers, causing further template creation to fail and potentially affecting networking functionality. This is a denial‑of‑service issue affecting the kernel, not a direct code‑execution flaw.

The vulnerability exists in the Linux kernel in the mlxsw driver for Spectrum flower network devices. Any kernel that loads this module and provides flow offload templates is affected, regardless of the exact kernel version, as the patch that fixes the leak changes only the driver code.

The EPSS score is < 1%, indicating a low probability of exploitation, and the vulnerability is not listed in CISA KEV, so there is no evidence of widespread exploitation. The flaw could be triggered by privileged users or applications that create a large number of flow templates, leading to exhaustion of resources and a denial of service. Based on the description, it is inferred that the attacker must have the capability to create flow templates, which typically requires elevated privileges or local interaction with the kernel. Because the flaw is confined to kernel internal functions, it requires local or privileged access and there is no known network‑side or user‑land attack vector. The CVSS score of 2.3 indicates a low severity, but the potential for service disruption suggests a moderate‑to‑high concern for systems running this driver.