The vulnerability occurs in the drm/amdgpu driver within the Linux kernel, specifically in the AMDGPU_GEM_OP_GET_MAPPING_INFO branch of the amdgpu_gem_op_ioctl() function. When kvcalloc() fails with -ENOMEM, the code path incorrectly bypasses the cleanup label 'out_exec', causing a lock leak of three resources including the per-process VM root page directory dma_resv lock. This leaked lock blocks further operations on the same VM, leading to a local denial of service for any process with access to the GPU rendering device. The issue was reproduced on Linux kernel 7.0.0-10 with Ryzen 7 5700U / Radeon Vega hardware. The fix involves routing the failure path through the cleanup label to properly release all held locks and references.

An unprivileged local user with access to /dev/dri/renderD* can trigger a denial of service against their own GPU context by causing the lock leak. Subsequent GPU operations block indefinitely, and the affected process may enter an uninterruptible sleep state (D state) that is not resolved even by SIGKILL, requiring a system reboot to recover. This impacts system stability and availability of GPU resources for the affected user.

A fix has been implemented in the Linux kernel to route the failure path through the proper cleanup code, preventing the lock leak. Users should update their Linux kernel to a version that includes this patch. Since this is not a cloud service, remediation depends on applying the updated kernel. Patch status is not explicitly stated in the input data; users should consult the official Linux kernel advisories or distribution updates for the fixed version.