The vulnerability exists in the DRM Radeon driver of the Linux kernel. The function radeon_ring_restore() frees a backup buffer only when the restore path succeeds. If a lock acquisition fails, the function exits early without freeing the buffer, resulting in a memory leak each time a GPU reset fails at the lock stage. Repeated lock failures can lead to cumulative kernel memory exhaustion, potentially destabilizing the system.

All Linux kernel configurations that include the unpatched Radeon DRM driver may be affected. The specific kernel versions are not listed in the data, so any distribution shipping the driver code before the referenced commits is potentially impacted.

EPSS score of < 1% indicates a very low probability of active exploitation, while the CVSS score of 5.5 reflects a moderate severity due to the memory exhaustion potential. The vulnerability is not listed in the CISA KEV catalog. The issue can be triggered by repeated GPU resets that hit the lock failure path in radeon_ring_restore(); an attacker that can induce such resets—whether locally or remotely—may cause cumulative kernel memory exhaustion, leading to a denial‑of‑service condition on the affected host.