The AMDGPU driver in the Linux kernel fails to zero‑initialize the GART page tables when allocating buffers. When a single page table entry is written, the GPU TLB may speculatively read uninitialized entries from the same cache line. These stale entries can appear valid, and a later write to another entry in that cache line can cause the GPU to use a garbage page table entry from the TLB. The result is that the GPU may reference incorrect or stale memory, leading to corrupted GPU memory usage or abnormal driver behavior that can destabilize the graphics subsystem.

All Linux kernel installations that ship the default AMDGPU driver are subject to this flaw. This includes every distribution that brings a recent kernel with the AMDGPU module enabled, regardless of distribution name. The vulnerability exists until the kernel patch that zero‑initializes the GART table upon allocation is applied.

The vulnerability is rated with a CVSS score of 8.8, classifying it as high severity. Its EPSS score is stated as less than 1%, indicating a low probability of exploitation in the wild, and it is not listed in the CISA KEV catalog. Inferred from the description, an attacker would need local or privileged access to the host in order to allocate GPU buffers and trigger the speculative TLB behavior. With such access, exploitation could cause GPU memory corruption, device instability, or denial of service.