The vulnerability is a null pointer dereference in the AMDGPU driver when an unmapped buffer object is queried for mapping info via an ioctl. Because the return value from amdgpu_vm_bo_find() is not checked, the code dereferences a NULL pointer, causing a kernel crash. This results in a complete service interruption of the affected system but does not provide code execution, data compromise, or privilege escalation.

All Linux kernel builds that include the AMDGPU driver and have not incorporated the fix recorded as commit 528b19377affc1cc7362a70a254c1dda793595f9 are susceptible. This includes any distribution shipping a kernel older than that commit while running a GPU supported by AMDGPU. Exact version ranges are not listed, so administrators should consult the kernel change log for the mentioned commit to verify whether their kernel is affected.

The flaw can be exercised by any process with permission to call the DRM_IOCTL_AMDGPU_GEM_OP ioctl, typically users in the render group. Although EPSS data is unavailable and it is not in the CISA KEV catalog, the attack requires only local access and results in a denial of service by crashing the kernel. The CVSS score is not disclosed, but the nature of the NULL pointer dereference in privileged kernel code implies a high severity level.