Impact
A parse error in the amdgpu driver’s SmartShift bias sysfs store caused the power‑management reference count to be incremented before the function returned. The recent fix returns the error early, preventing the erroneous increment. This reference‑counting bug (CWE‑911) can lead to kernel instability or a panic, but it does not provide a direct privilege‑elevation or user‑space data exfiltration path. Based on the description, it is inferred that the flaw is triggered when an attempt to write an invalid value to the SmartShift bias attribute occurs, leading to a mis‑increment. Risk is limited to kernel‑space crashes; no remote code execution or direct data compromise is described.
Affected Systems
All Linux kernels that include the amdgpu DRM driver and expose the SmartShift bias sysfs attribute are potentially affected. The driver is used on machines with AMD GPUs that rely on the amdgpu driver. Because the advisory does not list explicit kernel versions, any release prior to the commit that introduced the patch is vulnerable.
Risk and Exploitability
The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% reflects a low probability of exploitation in the wild. The flaw is not listed in the CISA KEV catalog. Because the bug is a reference‑counting error, exploitation would typically require local access to trigger a write to the sysfs attribute; it is unlikely to be remotely exploitable.
OpenCVE Enrichment