A race condition exists in the MxGPU‑Virtualization driver’s ioctl path when multiple processes access the global variable amdgv_cmd concurrently without proper synchronization. This unsynchronized access can trigger a heap‑based buffer overflow, which an attacker could exploit to cause a denial of service in the context of the vulnerable system. The vulnerability is classed as CWE‑367, a race condition. The potential impact is localized to the system running the driver and can lead to kernel crashes or device failure.

AMD Instinct MI210, AMD Instinct MI250, AMD Instinct MI300A, AMD Instinct MI300X, AMD Instinct MI308X, AMD Instinct MI325X, AMD Radeon PRO V620, and AMD Radeon PRO V710 are all affected by this flaw. Specific firmware or driver revision numbers are not listed in the provided data.

With a CVSS score of 2, the severity level is low. The EPSS score is not available and the vulnerability does not appear in the CISA KEV catalog, indicating a low likelihood of widespread exploitation. Attackers would need to obtain access to send malicious ioctl requests to the driver, implying a local or privileged attacker perspective unless the virtualized environment exposes the device to untrusted guests.