The amdgpu driver mistakenly permits duplicate FENCE chunks within a single command submission. Each duplicate updates the driver’s temporary buffer object without releasing the reference taken for earlier chunks, causing a leaked buffer reference that remains after the handle is closed and after the process exits. The leak can grow over time and potentially exhaust kernel memory, which may impair system availability.

The flaw targets the Linux kernel’s open‑source amdgpu graphics driver. Any unpatched kernel that includes amdgpu is vulnerable. The advisory does not specify exact kernel versions, so all Linux installations using the unpatched driver could be affected.

The EPSS score is not available and the issue is not listed in CISA’s KEV catalog, indicating a low current exploitation awareness. The likely attack vector is local: an adversary that can submit graphics commands with duplicate fence entries could trigger the leak and gradually consume kernel memory, but no clear remote exploitation path is documented.