The flaw is an integer overflow in the dal_vector_reserve() function of the AMDGPU display driver. That function computes the allocation size as capacity × vector->struct_size using 32‑bit to a small value. When krealloc() is called with that truncated size it returns a buffer smaller than required, and later vector appends overwrite the kernel heap. This heap corruption can disclose or modify arbitrary kernel memory, potentially allowing of service.

All Linux kernels that contain the original dal_vector_reserve() the commit that replaces krealloc() with krealloc_array() in the AMDGPU driver. Any distribution that ships such kernels, regardless of vendor or release date, is vulnerable.

The EPSS score of <1 % shows a very low probability of exploitation under current conditions, and the vulnerability is not listed in the CISA KEV catalog. To reach the vulnerable code paths an attacker would need local or privileged access capable of interacting with the AMDGPU driver (for example, by loading malicious firmware or sending crafted GPU commands). Successful exploitation could corrupt kernel memory, leading to privilege escalation or a system crash, but the likelihood remains low at present.