The Linux kernel’s AMD XDNA driver contains a race condition that can lead to a use‑after‑free. When force_iova mode is enabled, the driver frees an IOMMU domain during device removal, and a later call to free a gem object may try to access the freed domain. The lack of a proper lifetime guard can corrupt kernel memory and result in a crash. The description does not directly state who can exploit it; it is inferred that local execution is required, but this is not explicitly documented.

All Linux kernel builds that include the AMD XDNA driver with the unpatched force_iova mode are affected. The advisory does not enumerate specific release or version numbers, so any kernel that still contains the vulnerable code is potentially impacted.

The CVSS score of 8.8 indicates a high‑severity flaw that can be exploited locally. The EPSS score of <1% suggests a low probability of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. Because the flaw can lead to kernel memory corruption and a system crash, it is considered a high‑risk issue for systems running the affected driver.