This flaw exists in the AMDGPU driver of the Linux kernel. When a virtual function (VF) is used without enabling VCN v2.5, the driver skips releasing the VCN poison interrupt in deinitialization. The unintended skip leads to an invalid memory operation and causes a kernel panic, rendering the system unusable until a reboot. The weakness is a failure to handle erroneous or missing conditions and is classified as CWE‑832.

All Linux kernel distributions that ship the AMDGPU driver and support VCN v2.5 are susceptible. No specific kernel versions were enumerated, but the issue persists until a kernel with the fix is installed. Users running the affected driver on any kernel should be considered at risk.

Based on the description, it is inferred that exploitation would require local privileged access or the ability to manipulate virtual function configuration or control kernel module operations. The CVSS score of 5.5 indicates moderate severity. The EPSS score of less than 1% suggests that exploitation is unlikely in the wild. The vulnerability is not listed in CISA KEV. The issue manifests during module unload or deinitialization; therefore the attack vector involves manipulating virtual function configurations or unloading the amdgpu kernel module. No public exploit or widespread use has been reported. In environments where virtual functions are disabled or module unloading is restricted, the risk is lower; however, in a system that allows an attacker to unload or reload the amdgpu module, a crash could be triggered, causing a denial of service.