The vulnerability is found in the Linux kernel’s accel/amdxdna driver. An integer overflow occurs during the calculation of the ubuf size, leading to an undersized memory allocation that can corrupt kernel memory. The flaw is classified as CWE‑190.

All Linux kernel versions that lack the check_add_overflow patch in the accel/amdxdna code are affected. This includes every release prior to the commit that applied the fix, spanning current stable kernels and the pre‑release 7.0‑rc1 listed in the CPE specification. Distribution packages that ship those kernels remain vulnerable until they are updated.

The CVSS base score of 7.8 marks it as high severity, yet the EPSS score of less than 1 % indicates exploitation is currently unlikely. The flaw requires the attacker to reach the system with local or elevated privileges to load or interact with the AMD DNA accelerator driver, and an attacker would need to trigger a controlled ubuf allocation to overwrite critical kernel memory. Because the vulnerability resides within internal driver calculations, remote exploitation without prior code execution is not apparent.