The Linux kernel contains a bug in the Advanced Sound Architecture for AMD devices: when creating Digital Audio Interface (DAI) links, the function walks the list of links until it encounters an uninitialized entry. Because the list is allocated with exactly the number of endpoints, if all entries are initialized the loop reads past the array boundary, potentially corrupting kernel memory. This flaw can lead to local privilege escalation or a system crash by executing arbitrary code or corrupting kernel data structures.

All Linux kernel builds that include the AMD Advanced Sound Architecture module (acp-sdw-sof). The affected code resides in the sound subsystem of the kernel itself. No specific kernel variants or releases are listed, so any kernel version that bundles this module is potentially impacted.

The CVSS score of 8.4 indicates high severity, while the EPSS score of < 1% suggests a very low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local: an attacker with local system access who can execute code in user space must abuse the audio subsystem to trigger the out‑of‑bounds read. Because the flaw results in uncontrolled memory access within the kernel, a successful exploit could lead to privilege escalation or a denial of service.