Technical impact
A memory leak exists in the Linux kernel’s AMD GPU DRM display driver. When a display sink is connected, the driver overwrites the drm_edid pointer without freeing the previous allocation on resume, which can steadily consume kernel memory. Over multiple resume cycles the kernel may exhaust available memory, potentially leading to crashes or forced reboots. The flaw does not provide code execution, information disclosure, or direct privilege escalation.
Affected Systems
All Linux kernel builds that include the amdgpu_dm driver are potentially affected. The CNA listing identifies Linux as both vendor and product. No specific version range is supplied, but the fix is present in newer kernel releases that incorporate the referenced commit.
Risk and Exploitability
The EPSS score is <1%, indicating a very low exploitation probability, and the vulnerability is not listed in CISA’s KEV catalog. The CVSS score of 5.5 indicates moderate severity. Because the issue resides in a kernel module, exploitation would appear limited to local or privileged users and would require repeated resume events to accrue a significant memory drain. While not widely exploited, the leak can still result in a denial‑of‑service if left unmitigated in environments where resume cycles occur frequently.
