A heap overflow exists in the Linux kernel’s AMD DRM powerplay code. When users write to a sysfs attribute the function pp_dpm_set_pp_table() copies up to PAGE_SIZE bytes into a heap buffer that is only allocated to the size of soft_pp_table_size, allowing an out‑of‑bounds write. This can corrupt kernel memory, potentially leading to a crash or, if controlled, privilege escalation.

All Linux kernel releases are affected; the vulnerability was found in the drm/amd/pm driver. No specific version list is available in the source data.

The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog. Without a published CVSS score the exact severity cannot be quantified here, but a heap overflow that corrupts kernel memory is generally considered high risk. Attackers would need local access to write to the offending sysfs attribute, so the attack vector is local user or privileged process. The absence of an explicit CVSS score or EPSS value makes it difficult to gauge exploitation probability, but such kernel memory corruption is typically exploitable in controlled contexts.