A use‑after‑free flaw exists in the AMDGPU DRM driver’s power‑management interface. The function amdgpu_dpm_get_pp_table() returns a pointer to a driver‑owned power table after releasing the pm mutex, and then a sysfs read attempts to copy from that pointer. If a concurrent write frees the table while the copy is taking place, the kernel can read freed memory, leading to corruption. This bug is classified as CWE‑825 and can cause arbitrary kernel memory corruption.

The vulnerable component is the Linux kernel with the AMDGPU DRM driver. Any kernel version that was shipped prior to the inclusion of commit f6eed7ac (which implements the safe copy into caller‑provided storage) is affected. Distributions that ship an untouched upstream kernel or deploy the kernel without the patch are impacted, while upgraded kernels containing the fix are immune.

The CVSS score of 7.8 indicates high severity, while the EPSS score of <1% signals a low likelihood of exploitation in the near term. The vulnerability is not listed in the CISA KEV catalog and no public exploits are available. The attack vector, inferred from the description, is local via the sysfs interface that exposes the power table. An attacker who can manipulate the sysfs read might trigger the use‑after‑free, resulting in kernel memory corruption that potentially enables privilege escalation.