A flaw in the amdgpu driver causes the SmartShift bias sysfs store routine to increase a power‑management reference count on a parse error and then proceed with PM access operations. Returning the error before acquiring PM access prevents the erroneous refcount increment and avoids the subsequent resource misuse. The bug could lead to a kernel panic or other destabilizing behavior if triggered, but it does not provide a direct route to bypass authentication, elevate privileges, or exfiltrate data.

The vulnerability affects any system running the Linux kernel that includes the amdgpu DRM driver. No specific kernel version is listed, but the issue was fixed in a later commit of the amdgpu subsystem. Systems with AMD graphics hardware that expose the SmartShift bias sysfs attribute are the only targets.

No CVSS score is published and the EPSS score is not available, so the baseline severity cannot be quantified. The modification is limited to privileged code paths that an attacker would need local root access to invoke, either by writing to the sysfs attribute or by exploiting a separate local privilege escalation. Because the commit fixes the bug by changing the control flow, the remaining attack surface is minimal. The CVE is not listed in the CISA KEV catalog, indicating that no widespread exploitation has been observed.