The Linux kernel's ixp4xx_hss driver had a flaw in its ixp4xx_hss_probe() function where it allocated two HDLC netdev objects instead of one. The first netdev was registered, but the second was stored and later used for unregistration and freeing, causing a mismatch. This led to a memory leak if the second allocation failed and improper resource management. The fix involved allocating a single HDLC netdev and assigning it consistently to both the local variable and port->netdev.

This vulnerability causes resource mismanagement in the Linux kernel driver, specifically a memory leak and potential inconsistencies in device registration and unregistration. There is no indication of direct security impact such as privilege escalation or remote code execution. No known exploits are reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The issue has been resolved in the Linux kernel by modifying the driver code to allocate only one HDLC netdev object. Users should monitor official Linux kernel updates and apply the fix when available.