An improper error handling flaw in the Linux kernel asus-wmi driver allows local attackers to trigger resource leaks, resulting in potential local denial of service or elevated system impact.

This vulnerability is a resource management error occurring during the initialization of the asus-wmi driver. Because error path labels are ordered incorrectly, failed probe attempts fail to clean up previously registered subsystems, leading to memory and resource leaks that an attacker with local, low-privileged access could potentially exploit.

While the CVSS score of 7.0 (High) is driven by the potential for local integrity and availability compromise, the requirement for local access and high complexity limits immediate exposure. However, successful exploitation could lead to system instability, kernel panics, or denial of service on affected hardware, necessitating updates to maintain system uptime and reliability.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, which contains the reordered error path labels that correctly handle resource cleanup.

Proactive Monitoring: Monitor system logs for kernel-related errors or repeated driver initialization failures that might indicate an attempt to trigger probe failures.

Compensating Controls: Ensure strict adherence to least privilege policies, as the vulnerability requires a local authenticated user to interact with the vulnerable driver component.

Public Exploit Available: No (exploit_available: false)

This vulnerability highlights the importance of robust error handling in kernel-level drivers. Administrators should prioritize patching the Linux kernel to version 7.2.6 to remediate these resource leaks. While the risk of remote exploitation is negligible, the potential for local denial of service warrants the application of this fix during the next scheduled maintenance window.