This vulnerability is a race condition in the Linux kernel’s AMD XDNA driver that can lead to a use‑after‑free when the device is removed while force_iova mode is enabled. If an attacker can force the device removal and call amdxdna_gem_obj_free() subsequently, the driver may access freed memory and potentially execute arbitrary code or crash the system. The primary weakness is a memory‑corruption flaw that, when triggered, could allow local privilege escalation or denial of service.

All Linux kernel systems that incorporate the AMD XDNA driver in force_iova mode may be affected. No specific kernel releases or version numbers are provided in the advisory, so the issue applies to any kernel build that includes the unpatched driver code.

The CVSS score is not listed and EPSS is unavailable, but the use‑after‑free race represents a high‑severity flaw that can be exploited locally with sufficient access to influence device removal order. The flaw is not currently listed in CISA’s KEV catalog and is not known to have public exploits, yet the nature of the bug warrants prompt remediation due to its potential impact on system stability and security.