This vulnerability involves a firmware resource leak in the AMDGPU driver for gfx6 architecture. When the driver tears down the GFX block, the firmware requested in gfx_v6_0_init_microcode() is not released, causing leaked firmware resources such as PFP, ME, CE, and RLC to remain allocated. The leak can accumulate over time, potentially exhausting kernel memory and leading to a denial of service. The weakness is identified as a missing release of memory after deallocation.

All Linux kernel environments that implement the AMDGPU driver for gfx6 hardware are affected. The vulnerability exists in the kernel source tree for the AMDGPU component; specific kernel versions are not listed, but any release that includes the gfx_v6_0_init_microcode() path without the accompanying free logic is impacted.

No CVSS, EPSS, or KEV scores are available for this issue, so the overall risk assessment remains uncertain. Based on the description, the likely attack vector is local; an attacker would need the ability to load or unload the graphics driver, which typically requires kernel‑level privileges or direct interaction with the hardware. Because the leak is tied to driver teardown, it is not exploitable via a network‑bound interface. The probability of exploitation in the wild is unknown, and the vulnerability is not listed in the CISA KEV catalog.