During a GPU reset, the AMDGPU driver reads display registers and scanout position without holding the reset semaphore. Because the reset owns the semaphore for writes, this unsynchronized access triggers a lockdep assertion and taints the kernel when lockdep is enabled. The flaw does not allow arbitrary code execution or data disclosure; it only leads to internal warnings and kernel tainting, which can affect reliability of the operating system.

Any Linux kernel installation that uses the AMDGPU driver may be affected. The issue existed in all kernel versions before the commit that serializes the vblank counter reads against GPU reset, so all older kernels that include the AMDGPU module are vulnerable.

The failure mode is confined to a local, privileged context that controls GPU reset operations. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, indicating a low to moderate exploitation likelihood. There is no direct impact on confidentiality or integrity; the primary consequence is kernel tainting and potential stability problems, a risk that is limited to system availability and reliability.