The vulnerability involves the Linux kernel AMDGPU driver’s handling of userptr buffer objects (BOs). During a brief period while allocating or freeing a userptr BO, the BO’s virtual memory reference can become NULL, and the code would attempt to use it without checking for this state. This oversight could lead to a null pointer dereference, potentially causing the kernel to crash or become unstable. The fix commits a new check and a reference to the VM root to avoid undefined behavior during that race.

The issue affects the Linux kernel’s AMDGPU driver in all versions that contain the buggy code before the patch commit 631849ff5d603841e74f19f4a5e30fe1f7d7cf30. In practice, this is any kernel build that lacks the recent kernel update or the specific commit that introduced the null‑check. System administrators should verify whether their kernel packages include this commit and apply an update if it is missing.

No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. The CVSS score was not published for this bug, so the severity cannot be quantified precisely. The attack vector is inferred to be local or privileged access that can manipulate userptr BO allocation and deallocation within the AMDGPU context, which might enable an attacker to trigger the null dereference. Because the exploitation requires control over GPU buffer management, the risk is likely moderate, and the vulnerability is not actively exploited in the wild according to the available data.