A flaw in the Linux kernel’s AMD GPU driver causes allocated memory to be freed with the wrong routine. The driver uses kvcalloc() to obtain buffer space, a function that can return memory from vmalloc for large allocations. When the improper kfree() routine is used to release that buffer, vmalloc memory is corrupted, which can result in system instability or the execution of arbitrary code in kernel mode. This type of vulnerability is commonly classified as a memory corruption issue, related to the wrong deallocation of kernel space memory.

The vulnerability affects Linux kernel versions that include the amdgpu driver. All distributions that ship a kernel with the AMDGPU module compiled in are potentially impacted, regardless of vendor, because the flaw lies in the generic amdgpu code. No specific patch releases are named in the data, so any kernel build that incorporates the vendor’s amdgpu fix is considered mitigated.

The official CVE record does not provide a CVSS, EPSS or KEV score, so the exact risk is inferred from the nature of the defect. The impact is moderate‑high because local memory corruption can lead to DoS or privilege escalation. The likely attack vector requires an attacker with the ability to cause the amdgpu module to allocate and later free memory, which typically means the attacker needs user‑space processes that interact with the GPU, root privileges, or the ability to load a malicious kernel module. No public exploits are listed in CISA KEV, but kernel‑level memory corruption poses a significant threat when exploitable.