Hi,
have you collected a memory dump of svchost process when memory consumption was high? This is first step in troubleshooting process, identify in which region leak is happening, then different techniques can be used to isolate issue and find solution/workaround. Also, how aggressive this leak? Do you happen to collect performance counters on affected machines?