The AMD xDNA driver in the Linux kernel performs a copy_to_user operation that is not properly bounded. This flaw is an out‑of‑bounds read (CWE‑125). When an application supplies a user buffer smaller than the data the driver attempts to return, the kernel copy fails, the fault terminates the calling process, and the service that relied on the driver is disrupted. No direct code execution or privilege escalation is granted by the bug.

All Linux kernel builds that include the AMD xDNA driver without the recent patch are affected. The vulnerability exists in kernel versions that have not incorporated the commits referenced in the advisory. Systems that load the driver at boot or dynamically via modules are potentially vulnerable until the kernel is upgraded to a build that contains the size adjustment.

Based on the description, it is inferred that the flaw can be triggered only by a local user interacting with the /dev/amdxdna device file, making the primary attack vector local. The CVSS score of 7.3 indicates a high severity, and the EPSS score of less than 1 % suggests a low likelihood of widespread exploitation. The vulnerability is not listed in the CISA KEV catalog. The primary risk is service disruption due to a fault that terminates the calling process, rather than direct code execution.