The AMD XDNA acceleration driver contained a lifetime race that allowed a use-After-Free when an amdxdna_umap object was being released concurrently with another context attempting to acquire a reference. This race can corrupt kernel memory or crash the system. The weakness is a classic race leading to use-After-Free, categorized as CWE-825, and is limited to the AMD XDNA subsystem in the Linux kernel.

Any Linux kernel that includes the AMD XDNA acceleration subsystem—regardless of distribution or hardware—may be vulnerable before the patch. The flaw exists only when that subsystem is enabled; kernel builds without AMD XDNA support are unaffected.

The CVSS base score is 7.8, indicating high severity, and the EPSS score of < 1% indicates a low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, so no widespread exploitation has been reported. The attack likely requires local execution on a system with the AMD XDNA subsystem enabled; by concurrently releasing an amdxdna_umap object while another context attempts to acquire a reference, the race can lead to a use-After-Free.