The Linux kernel's rtw88 PCI wifi driver had a resource leak vulnerability in the rtw_pci_probe() function. PCI resources allocated by rtw_pci_setup_resource() were not freed if rtw_pci_napi_init() failed, because the error path skipped the resource destruction function. The fix introduces a dedicated cleanup label for the NAPI setup failure path to properly destroy PCI resources, preventing resource leaks. This bug was detected by an experimental kernel memory-management analysis tool and confirmed manually. No runtime tests were conducted due to lack of suitable hardware.

The vulnerability causes a resource leak in the PCI wifi driver when NAPI setup fails, potentially leading to resource exhaustion or instability in the kernel's PCI subsystem. There is no indication of direct security compromise such as code execution or privilege escalation. No known exploits are reported in the wild.

A fix has been implemented in the Linux kernel to address this resource leak by adding proper cleanup on NAPI setup failure. Users should update to the fixed kernel version once available. Since this is a kernel-level resource management bug, applying the official kernel patch or upgrading to a kernel version containing this fix is the recommended mitigation.