The vulnerability is an ABBA deadlock that occurs in the AMD GPU driver when the system suspends while video playback is active. The function that disables ISM workers holds a global lock (dc_lock) while the delayed work also tries to acquire the same lock, resulting in a deadlock. The deadlock causes the system to become unresponsive, effectively denying service. The weakness is a concurrency issue involving lock ordering.

All Linux kernel releases containing the amdgpu_dm_ism_disable path in the AMD GPU driver. The specific affected kernels are those prior to the application of the commit that introduces the deadlock fix.

The CVSS score is 5.0 and EPSS score < 1%, but the vulnerability can lead to a denial of service when the system enters or leaves suspend. Exploitation requires local privilege to trigger suspend or to operate while video playback is active, so the attack vector is local. The vulnerability is not listed in CISA KEV, indicating no known active exploits. The risk is medium: it causes a system freeze but does not allow arbitrary code execution or data exfiltration. Anyone who can force a suspend for a system running the affected driver can trigger the deadlock.