In the Linux kernel’s AMDGPU driver, a flaw allows a Process Address Space ID (PASID) to be reused immediately after a process terminates. This premature reuse can leave pending page faults in the Interrupt Handling ring, which may trigger an interrupt handling fault when the next process uses the same PASID. The improper resource reuse corresponds to CWE‑367 and can destabilize the kernel, potentially leading to a denial‑of‑service condition.

Affected systems include the Linux kernel’s DRM subsystem, specifically the AMDGPU driver. All kernels prior to the commit that removes immediate PASID reuse—identified by commit 8f1de51—are vulnerable. Systems running newer kernels that include the patch are not affected. The issue spans the Linux kernel versions listed in the CPE entries up to 7.0 rc5.

The EPSS score is below 1%, indicating a low exploitation probability, while the CVSS score of 5.5 reflects moderate severity. The vulnerability is not listed in CISA KEV. Exploitation would require privileged or root access to create a process that engages the GPU, or the ability to run privileged graphics workloads. If the flaw is triggered, the kernel can become unstable, leading to a possible denial‑of‑service. The overall risk remains moderate, but patching is advisable.