The vulnerability lies in the AMDGPU driver of the Linux kernel. When the IOCTL AMDGPU_GEM_OP_GET_MAPPING_INFO fails with ENOMEM, the kernel bypasses a cleanup path and leaks several locks, including the per‑process VM root page directory lock. Subsequent GPU operations by that process block on the held lock, causing the process to become unresponsive. Because the IOCTL is permitted for any unprivileged user that has access to a /dev/dri/renderD* device, any local user can trigger the failure and induce a denial of service on the GPU context that they own.

All Linux kernel implementations that have not yet incorporated the patch that restores the out_exec cleanup path are affected. This includes stock kernel 7.0.0‑10 on systems such as a Ryzen 7 5700U with Radeon Vega (Lucienne) as reported, and by implication any distribution kernel derived from the same code base before the fix. The issue is local and requires only access to a render device.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of <1% suggests a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, further indicating limited concern at this time. The attacker model is a local unprivileged user with read/write access to a /dev/dri/renderD* device. Exploitation requires only a single ioctl call that fails with ENOMEM; however, the impact is confined to the caller’s GPU context and does not allow escalation or other privileged actions. Overall, the risk remains moderate in environments that expose GPU devices to untrusted users, but low in tightly controlled or hardened setups.