The vulnerability in the Linux kernel involves the trace_remote_alloc_buffer() function in the tracing/remotes component. When page allocation fails during buffer allocation, the descriptor's CPU count (desc->nr_cpus) is not incremented for the current CPU. As a result, the partially allocated buffer descriptor (rb_desc) is not freed properly in the error handling path (trace_remote_free_buffer()), causing a memory leak. The fix increments desc->nr_cpus immediately after the first successful allocation for the current CPU to ensure proper cleanup on errors.

This vulnerability causes a memory/resource leak in the Linux kernel tracing subsystem. While it does not directly lead to code execution or privilege escalation, the leak could degrade system performance or stability over time if triggered repeatedly. There is no indication of active exploitation in the wild.

A fix has been implemented in the Linux kernel to address this issue by correcting the CPU count increment logic during buffer allocation. Users should apply the official kernel updates or patches that include this fix. Since this is a kernel-level bug, upgrading to a fixed kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the Linux kernel vendor advisory or distribution security updates for the exact fixed versions.