The Linux kernel "drm/amdkfd" component suffered a 32‑bit overflow in the calculation of the total CWSR (command‑queue save‑restore area) size. Because the value was stored in a 32‑bit type and used as an allocation size, a product of large "ctx_save_restore_area_size" and "debug_memory_size" values could wrap, producing an undersized allocation. The resulting memory corruption could overrun firmware structures, potentially enabling a kubeernel attacker to gain elevated privileges, corrupt memory, or cause a crash. This is an integer‑overflow leading to buffer‑overflow weakness (CWE‑674, CWE‑119).

Affected systems include the Linux kernel, specifically the "drm/amdkfd" driver. No specific kernel versions are listed in the advisory; the vulnerability is fixed in commits referenced in the description.

The CVSS score is not provided and no EPSS value is available, but the vulnerability affects kernel memory management and requires a user with access to the AMD KFD subsystem. Because it requires interaction with the GPU driver, exploitability is likely limited to local privileged users or compromised kernel processes; no public exploits have been reported. The absence of KEV inclusion suggests that the vulnerability has not yet been classified as a known exploited threat, but the impact of privilege escalation warrants immediate attention.