A flaw in the Linux kernel’s AMD Kernel Fusion Driver (amdkfd) causes a bit leak in the queue ID bitmap when memory allocation fails during the first queue creation for a process. The bug prevents the clear_bit function from being called, leaving the QID marked as used permanently. Over time this consumes all available queue slots, resulting in a denial of service by preventing further queue allocation for the affected or other processes. The weakness is a flaw in resource management, leading to uncontrolled resource consumption.

The vulnerability affects the Linux kernel, specifically the amdkfd driver implementation that manages AMD GPU queues. It applies to any Linux distribution that ships with a kernel version prior to the inclusion of the patch referenced in the commit list. No specific distribution or kernel version is enumerated in the data, so any system running an affected kernel must be considered vulnerable.

Based on the description, it is inferred that the issue can be exploited by a local attacker who can create queues for a process, such as an application using AMD GPU resources. The CVSS score of 5.5 indicates moderate severity; the EPSS score is < 1%, suggesting a low probability of exploitation, and the vulnerability is not listed in KEV. The impact of exhausting all queue slots is severe. Because the kernel path does not protect against the bit leak on error, the flaw is locally exploitable and can lead to service interruption for the compromised or other user processes.