The vulnerability arises from a double reference release on an AMDXDNA GEM object during a dma buffer memory mapping operation. When the initial reference is freed, a subsequent release dereferences freed memory, leading to a use-after-free condition. If an attacker can execute code in this context, they could manipulate kernel memory, gain escalated privileges, or crash the system. This reflects a classic memory corruption error (CWE-416 and CWE-825).

The flaw exists in the Linux kernel's AMDXDNA acceleration driver. All kernel builds that include the acceleration module without the applied patch are affected, regardless of distribution or kernel version, as the offending code path is part of the generic DRM subsystem. No specific vendor or patched versions are listed, so any active kernel containing the unpatched AMDXDNA code is vulnerable.

The CVSS score of 7.8 indicates high severity, but the EPSS score of < 1% indicates a low likelihood of exploitation. Even though the use-after-free flaw could allow code execution if an attacker can trigger the mmap path, active exploitation is considered unlikely according to the EPSS data. The vulnerability is not listed in CISA KEV, indicating no known active exploits. The attack vector is inferred to be local, requiring local access to trigger the buffer mapping operation, such as by running a malicious application that requests DMA mapping on the AMDXDNA device.