The kernel driver for Radeon GPUs contains an integer overflow in the function that aligns buffer pitches. The overflow occurs when rounding up the alignment and in the multiplication used to calculate the aligned pitch. If the calculations wrap, the driver may return an invalid or zero‑sized buffer to user space. Such incorrect buffers can cause kernel crashes or memory corruption, leading to service disruption or a potential break in kernel security context. The weakness falls under the category of integer overflow vulnerabilities that can be used to influence memory allocation behaviours.

All Linux systems that load the Radeon driver module, including typical desktop and server distributions that ship the stock Linux kernel with Radeon support. The issue is present in any kernel version prior to the commit that introduced the overflow checks. Exact kernel revision numbers are not specified in the advisory, but the patch is in the stable tree and thus applies to all kernels following the patch commit.

The EPSS score is below 1%, indicating a low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, meaning no publicly documented exploits are known. With a CVSS score of 7.8, the flaw is considered high severity. Based on the description, it is inferred that the attacker would need to create a mode‑dumb buffer through the DRM subsystem, which typically requires local system privileges or a trusted context that can execute DRM commands. The level of risk depends on how easily this can be triggered. In the absence of such access, exploitation is unlikely, but privileged users could still induce service disruption or memory corruption by creating invalid or zero‑sized buffers. Because the CVSS score is high, patching is strongly recommended.