The Linux kernel's asus-wmi driver had a vulnerability in the asus_wmi_add() function where error path labels were ordered incorrectly relative to the sequence of resource registrations. This caused resource leaks when initialization functions such as asus_wmi_custom_fan_curve_init() or asus_screenpad_init() failed, as cleanup calls for previously allocated resources were bypassed. The fix involved reordering the error handling labels to ensure resources are properly released in the reverse order of allocation.

Resource leaks can lead to degraded system stability and potential denial of service due to exhaustion of kernel resources. The CVSS score of 7.0 with high confidentiality, integrity, and availability impact indicates that exploitation could significantly affect system operation, although the attack vector is local with high complexity and requires low privileges without user interaction.

A fix is available that corrects the error handling sequence in the asus-wmi driver to properly release resources on initialization failure. Users should apply the updated Linux kernel version containing this patch once it is released. No alternative mitigations are indicated.