Improper access control within the AMD µProf tool enables a local attacker with standard user privileges to write to a kernel‑shared memory region. This capability can cause a system crash or denial of service, disrupting availability for users. The weakness corresponds to CWE‑497, which reflects insufficient enforcement of access restrictions on privileged resources.

The vulnerability affects AMD µProf, the performance profiling component of AMD drivers. Specific version numbers are not disclosed in the advisory; administrators should verify all deployed µProf installations for exposure, as any version prior to the vendor’s update could potentially be impacted.

The CVSS score of 6.8 indicates a moderate risk to the affected system. Because the exploit requires local access and user privileges, an adversary must already have some foothold on the machine. The EPSS score is unavailable, and the vulnerability is not listed in CISA KEV, suggesting that publicly known exploitation is currently limited. Nonetheless, local exploitation could immediately crash the system, so vigilance remains warranted.