The vulnerability in the Linux kernel affects the mtd subsystem's virt-concat functionality. During every MTD registration, the function mtd_virt_concat_create_join() generates a name string. If a virtual concat with the same name is already registered, the function takes a branch that skips freeing the newly allocated duplicate name string, leading to a memory leak. The patch corrects this by freeing the temporary name before proceeding to the next item.

The flaw causes a memory leak in the Linux kernel's mtd subsystem during device registration. While this does not directly lead to code execution or privilege escalation, repeated exploitation could degrade system stability or exhaust memory resources.

A fix has been applied to the Linux kernel to free the duplicate generated name string properly. Users should update to the patched kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor sources for the exact fixed versions and remediation guidance.