The kernel function accel/amdxdna:amdxdna_ubuf_map allocates scatter‑gather structures but fails to free them when subsequent allocation or mapping calls fail, causing a memory leak that can grow until the system exhausts available memory and becomes unstable or refuses to service new requests. This is a classic example of a memory leak (CWE-401) compounded by unchecked error handling (CWE-672) and a resource management flaw (CWE-772).

The vulnerability affects the Linux operating system kernel. No specific kernel versions are listed in the advisory, so any kernel that contains the amdxdna driver before the applied fix may be impacted.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The most likely attack vector would require local kernel access or elevated privileges that can trigger the amdxdna driver’s mapping functions. Because the flaw is only triggered when allocation or mapping operations fail, the conditions for exploitation are somewhat constrained, which reduces the overall threat level but still enables the possibility of a denial of service if an attacker can force repeated failures. The risk is therefore moderate but should be mitigated promptly.