A memory leak in the Linux kernel USB driver can lead to a denial of service condition under memory pressure.

The vulnerability resides in the ax88179_178a network driver, specifically within the ax88179_tx_fixup function. When skb_linearize fails, the function returns a null pointer without freeing the socket buffer, allowing an unauthenticated attacker to trigger a memory leak by inducing memory pressure on the system.

Successful exploitation of this memory leak can lead to significant degradation of system performance or complete kernel panic, resulting in unauthorized service downtime. Given the CVSS score of 7.5, this high severity flaw poses a risk to critical infrastructure that relies on the affected USB network hardware, as the denial of service could potentially be triggered remotely or through local network traffic.

Immediate Action: Update the Linux kernel to version 6.1.183, 6.6.152, 6.12.104, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system memory usage and kernel logs for recurring allocation failures or instability patterns associated with the ax88179_178a driver.

Compensating Controls: If patching is not immediately feasible, restrict access to the affected network interfaces or implement resource limits on network traffic to reduce the likelihood of triggering memory pressure.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to system availability. Administrators should prioritize the deployment of the kernel updates provided by their distribution maintainers to ensure that the memory leak is resolved and system stability is maintained.