A kernel buffer overflow was identified in the AMD VCN4 driver within the Linux DRM subsystem. The flaw arises when the driver performs a message bound check without preventing integer overflow, permitting an attacker to craft malformed data that overflows internal limits. This can corrupt kernel memory or lead to arbitrary code execution, enabling a local privileged escalation attack. The weakness corresponds to CWE‑190 (Integer Overflow or Wraparound).

All Linux kernel releases that include the AMD VCN4 DRM driver are affected, specifically the drm/amdgpu/vcn4 component. The vulnerability exists in every kernel where this driver was compiled without the security patch. No specific vendor versions are listed beyond the Linux kernel itself, so any distribution using the vulnerable kernel is impacted.

The CVSS score is 5.5, indicating a moderate severity, and the EPSS score is < 1%, suggesting a low likelihood of exploitation. However, as this flaw is in kernel space, a successful exploit would grant the attacker root privileges. The vulnerability is likely exploitable only by local users who can control the Vulkan or DRM interfaces, implying a local attack vector. The kernel’s design and lack of a KEV listing suggest the risk is medium to high in environments where privileged users may aim to compromise system integrity.