Linux Kernel Memory Leak Vulnerability in AMD GPU ACPI Enumeration

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's AMDGPU driver, specifically within the ACPI enumeration function. When the function 'amdgpu_acpi_dev_init()' fails and returns an 'ENOMEM' error, the allocated 'xcc_info' is not properly released, leading to a memory leak. This issue has been addressed by modifying the error handling to ensure 'xcc_info' is freed before the function exits. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability causes a memory leak, which can lead to increased memory usage and potential exhaustion of system resources over time.

Reproduction

The vulnerability can be reproduced by invoking the 'amdgpu_acpi_enumerate_xcc()' function in a scenario where 'amdgpu_acpi_dev_init()' returns an 'ENOMEM' error. This will cause the function to exit without freeing the allocated 'xcc_info', thereby creating a memory leak.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the updated kernel can be found on the official Linux kernel website.

Added: May 28, 2026, 12:13 AM
Updated: May 28, 2026, 12:13 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
9.1
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.