In the Linux kernel, a resource management error was found in the AMD XDNA acceleration subsystem. The code that releases a physical buffer object (BO) after command submission sometimes fails to drop the reference when the mapping of that BO fails. Because the reference is leaked, the kernel keeps an extra hold on the BO, which can lead to resource exhaustion and degrade system stability. The flaw belongs to the class of resource leakage vulnerabilities (CWE-399).

The issue affects the Linux kernel's AMD XDNA acceleration driver. It was identified when the AMD XDNA command chain was processed following a user‑space buffer import that lacked a viable mapping. Any Linux kernel build that includes the amdxdna subsystem is potentially affected, though the specific kernel versions are not enumerated in the advisory.

The flaw is not listed in the CISA KEV catalog and the EPSS score is < 1%, indicating that automated exploitation is unlikely at present. The CVSS score of 5.5 indicates a medium severity. The vulnerability requires kernel-level access to trigger the erroneous path, and it does not provide a direct attack surface for privilege escalation. The risk is therefore medium, primarily as a potential denial-of-service vector if an attacker can repeatedly cause mapping failures within the amdxdna subsystem.