A null pointer dereference exists in the Linux kernel’s AMD KFD DRM module in the function that sets attributes for an SVM range. If a user process calls the kfd_ioctl_svm ioctl without first acquiring a virtual‑memory context via kfd_ioctl_acquire_vm, the process_info pointer can be null and the kernel will crash when it is dereferenced. The resulting kernel panic causes a loss of availability for the affected system.

All Linux kernel builds that include the drm/amdkfd module prior to the application of commit 83a26c812e0529eb040d31a76f73e33e637243d4 are affected. The advisory does not specify a particular kernel version range, so any Linux kernel derived from the vulnerable source code and lacking the patch is impacted.

The EPSS score is below 1 % and the vulnerability is not listed in CISA’s KEV catalog, indicating a modest exploitation probability. The flaw is local to the user who can issue the relevant ioctl calls; the likely attack vector is an attacker triggering the incorrect sequence of ioctl calls, which results in a denial of service but does not grant privilege escalation or remote code execution.