The vulnerability allowed compute kernels with access to AMDGPU VRAM to read stale data that remained from previous allocations before the buffer was wiped, exposing potentially sensitive information and causing crashes when pointer exchange fields were corrupted. This is an information exposure flaw that could allow privileged users to leak data from GPU memory.

Linux kernel across all distributions. The defect was in the AMD Kernel Fusion Driver (KFD) path for VRAM allocation; the patch is incorporated via the commit sequence referenced in the advisory URLs. No specific fixed version is listed, but any kernel containing those changes is immune.

The flaw is local to systems that support the AMD KFD interface. An attacker who can execute compute kernels on the affected host could read stale VRAM content, potentially leaking sensitive data. The CVSS score of 5.5 indicates moderate severity, while the EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog, meaning the probability of exploitation is low. However, the impact remains significant for privileged users with compute‑kernel privileges.