A high-severity memory management flaw in the Linux kernel amdgpu driver could lead to system instability or privilege escalation.

This vulnerability involves improper memory handling where the amdgpu driver fails to invoke pm_genpd_remove() before freeing acp_genpd memory. An authenticated local attacker can leverage this flaw to trigger resource leaks, system instability, or potentially escalate privileges.

Successful exploitation of this vulnerability could result in unexpected system crashes, leading to significant downtime for critical infrastructure relying on the affected kernel. With a CVSS score of 7.8, this vulnerability poses a high risk to system availability and integrity, particularly in environments where local access is granted to untrusted users.

Immediate Action: Update the Linux kernel to versions 5.10.265, 5.15.216, 6.1.183, 6.6.148, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or memory-related errors that may indicate exploitation attempts.

Compensating Controls: Restrict local access to systems running affected kernels and ensure that only authorized users have the capability to interact with hardware drivers.

Public Exploit Available: false

Given the potential for system-wide impact and the high CVSS severity, administrators should prioritize patching the Linux kernel across all affected production environments. Applying the vendor-supplied kernel updates is the only definitive method to remediate this memory handling defect.