The vulnerability resides in the AMDGPU command submission parser within the Linux kernel. During low‑memory situations, a kmalloc failure can occur. The parser then exits without unlocking its mutex, which can cause a deadlock or kernel hang. The supplied patch eliminates an unnecessary reference to the buffer‑object list and guarantees the mutex is released on allocation failure, preventing the deadlock scenario.

Systems that run a Linux kernel with the AMDGPU driver and contain the legacy amdgpu_cs_parser_bos code path are affected. The CVE does not specify a particular kernel version, so any kernel that implements the old path could be impacted until the patch is applied.

No CVSS or EPSS score is reported, and the vulnerability is not listed in CISA KEV. Exploitation requires a low‑memory condition and affects only internal kernel structures, making the practical risk low to moderate. The primary concern is system stability rather than direct security compromise.