A logic error introduced by an improperly applied commit in the Linux kernel AMD GPU driver causes a kernel crash when a system hosts two AMD GPUs, one of which does not support ASPM. The driver attempts to enforce ASPM based on subsystem settings, but the missing check leads to a hard‑to‑debug fault that brings the entire system down. The vulnerability results in a denial of service by terminating kernel operation.

All Linux distributions that ship a kernel containing the misapplied commit before the corrective refactor, particularly those with dual AMD GPUs where only one GPU supports ASPM. The issue is present in the mainline kernel as identified by the kernel CPE string. Distribution kernels that have applied the revert commit or the subsequent refactor are not affected.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score is below 1% and the vulnerability is not listed in CISA's KEV catalog, indicating a low probability of widespread exploitation. However, the impact of a kernel crash is severe. The vulnerability can be triggered by normal use of the affected dual‑GPU configuration; no public exploit is required. Attackers would exploit the crash by ensuring the system is in a state that triggers the misapplied ASPM check, which can be done simply by powering on or re‑initializing the devices.