Impact
In the Linux kernel, a resource management error was found in the AMD XDNA acceleration subsystem. The code that releases a physical buffer object (BO) after command submission sometimes fails to drop the reference when the mapping of that BO fails. Because the reference is leaked, the kernel keeps an extra hold on the BO, which can lead to resource exhaustion and degrade system stability. The flaw belongs to the class of resource leakage vulnerabilities (CWE‑399).
Affected Systems
The issue affects the Linux kernel's AMD XDNA acceleration driver. It was identified when the AMD XDNA command chain was processed following a user‑space buffer import that lacked a viable mapping. Any Linux kernel build that includes the amdxdna subsystem is potentially affected, though the specific kernel versions are not enumerated in the advisory.
Risk and Exploitability
The flaw is not listed in the CISA KEV catalog and no EPSS score is available, indicating that automated exploitation is unlikely at present. The vulnerability requires kernel‑level access to trigger the erroneous path, and it does not provide a direct attack surface for privilege escalation. The risk is therefore moderate, primarily as a potential denial‑of‑service vector if an attacker can repeatedly cause mapping failures within the amdxdna subsystem.
OpenCVE Enrichment