In the Linux kernel’s DRM AMD display module, an out‑of‑bounds read occurs when the function dp_get_eq_aux_rd_interval() accesses the aux_rd_interval array with an offset that can reach eight, while the array was declared to have only seven elements. This source of CWE‑125 allows a reading of kernel memory beyond intended bounds, potentially leaking sensitive information such as pointers or kernel addresses during DisplayPort communication.

The vulnerability affects the DRM AMD display driver in any Linux kernel released before the commit that increases the aux_rd_interval array length to eight entries. Because the affected version numbers themselves are not provided in the CVE record, administrators cannot pinpoint a specific stable release that is vulnerable. Any distribution that has not yet merged the fix and is running a kernel with the older definition is at risk, especially on machines equipped with AMD GPUs that connect to displays or docking stations capable of advertising eight LTTPR repeaters.

With an EPSS score of less than 1 % the likelihood of exploitation appears very low, and the vulnerability is not listed in the CISA KEV catalog. The flaw is exploitable only when a physical DisplayPort connection reports eight repeaters, so the attack vector is a local or physical attacker who can influence the display configuration. Exploiting the read would yield information disclosure without providing code execution or denial‑of‑service capability.