Impact
The vulnerability is a flaw in the AMD Performance Monitoring Controller driver within the Linux kernel. When the driver’s STB S2D telemetry initialization fails – for example, because the S2D telemetry region cannot be ioremapped or the SMU rejects the setup – the probe routine returns early but leaves a stale LPS0 s2idle handler registered and a debugfs directory unremoved. The leftover registration corrupts the global LPS0 list, causing the kernel to hit a BUG during a subsequent reload or normal s2idle transition, which results in a kernel crash.
Affected Systems
All Linux kernel builds that contain the built‑in amd_pmc driver are potentially affected, regardless of distribution. The CNA data lists only Linux to the fix is at risk. Any system that loads the amd_pmc module and encounters a failing STB init will be impacted until the kernel is updated.
Risk and Exploitability
The CVSS score of 4.4 reflects a moderate local denial‑of‑service impact. The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not listed in CISA’s The likely attack vector is a local actor with the ability to load or reload the AMD PMC module before the initialization succeeds; they could trigger the failing path to corrupt internal structures and crash the system. It is inferred that exploitation requires kernel loading privileges, as the module must be loaded to reach the fault path.
OpenCVE Enrichment