The Linux kernel’s AMD XDNA acceleration driver contains a race condition where the functions aie2_populate_range() and amdxdna_umap_release() access a VMA pointer that may already been freed, leading to a use‑after‑free scenario. This flaw can corrupt kernel memory and may provide an attacker with a foothold to destabilize the operating system or execute arbitrary code with elevated privileges.

The vulnerability applies to installations of the Linux kernel that include the AMD XDNA acceleration driver. No specific kernel release versions are identified, so any kernel containing the affected code prior to the recent patch may be impacted. Kernel vendors should verify that the commit removing the VMA accesses has been applied to their builds.

The CVSS score of 7.8 reflects high severity, but the EPSS score is below 1%, suggesting a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, indicating no known active exploits. The likely attack vector is local: an attacker would need to trigger the race between freeing and accessing the VMA pointer, which typically requires kernel execution state or local privilege escalation. While the advisory does not detail a complete exploitation chain, successful exploitation could result in kernel memory corruption, system instability, or privilege escalation. The overall risk remains significant because of the potential impact, but the low EPSS suggests actual exploitation likelihood is limited.