Impact
In the Linux kernel, the amdgpu_debugfs_test_ib_show() function resumes the GPU device with pm_runtime_get_sync() before acquiring the reset domain semaphore with down_write_killable(). If the semaphore acquisition is interrupted and the function returns, it fails to call pm_runtime_put_autosuspend(), leaving a runtime power‑management reference that prevents the GPU from suspending. The leaked reference keeps the GPU awake, causing increased power consumption and potential battery drain, but it does not provide code execution or denial of service capabilities. Based on the description, it is inferred that the unintended wake‑up of the GPU may also affect overall system energy efficiency.
Affected Systems
All Linux kernel releases containing the unpatched amdgpu_debugfs_test_ib_show() function are affected. Any distribution that uses such a kernel with an AMDGPU‑capable GPU and exposes the amdgpu_debugfs_test_ib_show() debugfs entry is vulnerable. The CVE data does not specify affected versions; the patch that introduced the fix is identified by commit ec30a576c2d4c0364549e6c04218f50704ef56c8.
Risk and Exploitability
The CVSS score of 1.9 indicates low severity, and the EPSS score of less than 1% shows a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves local access to the amdgpu_debugfs_test_ib_show() debugfs file and an interrupted down_write_killable() call—details about how to reliably trigger this interruption are not provided, so practical exploitation is considered unlikely. The primary risk is increased power consumption rather than direct security impact.
OpenCVE Enrichment
Debian DLA