The defect lies in the AMD KFD driver of the Linux kernel, where a failure to copy runtime information to user space leaves the debug trap state permanently enabled, sets a flag, increases a process reference count, and opens a debug event file. Because the code returns an error without undoing these changes, the system is left with an inconsistent trap configuration and a refcount imbalance. This can disrupt subsequent enable/disable operations, potentially causing kernel instability or crashes. The flaw represents improper error handling, resource leak, and refcount mishandling problems.

The vulnerability exists in all Linux kernel builds that contain the AMD KFD DRM driver (drm/amdkfd) before the patch that corrects the cleanup logic. Vendor and version information is not enumerated explicitly, so any Linux distribution shipping an unpatched kernel with that driver is impacted until the kernel is updated to a version that includes the fix.

The issue does not provide an avenue for remote code execution or privilege escalation; it is a local fault that can be triggered by legitimate usage of the KFD interface or by any process that forces the copy_to_user routine to fail. The CVSS score of 3.3 and an EPSS score below 1% indicate a low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Nevertheless, repeated failures could exhaust kernel resources or induce a kernel panic, resulting in a denial‑of‑service condition. Attackers would need local access to the system to trigger the flaw, and the risk is considered low to moderate based on the available metrics.