A security flaw in the Linux kernel’s AMD GPU driver allows an out‑of‑bounds read during the parsing of a decoding message. The driver checks bounds against the end of the buffer object (BO) but fails to correctly prevent reads beyond the BO boundaries. This defect lets a malicious actor read adjacent kernel memory, potentially exposing confidential data or causing a kernel crash.

The issue targets the amdgpu driver in the Linux kernel, specifically the VCN4 decoding path. The affected product is the AMD GPU driver module incorporated in the kernel. Affected kernels are any releases that include the amdgpu module before the patch that added proper bounds checking. No explicit version ranges are listed in the advisory, so all kernels prior to the latest update that contains the fix should be considered vulnerable.

The out‑of‑bounds read presents an information‑disclosure risk. The CVSS score of 7.1 denotes a high severity. EPSS is reported as <1%, indicating a very low current exploitation probability, and the flaw is not listed in CISA KEV. The likely attack vector is a local or privileged attacker who can supply a crafted decoding message to the VCN4 decoder; this is inferred from the driver’s interaction with user‑supplied data. Successful exploitation would require interaction with the graphics subsystem, but does not need network access or elevated privileges beyond those needed to trigger the decoding path.