The Linux kernel’s AMDGPU driver previously performed a free‑form TLV walk when parsing FRU PIA data, allowing a buffer over‑read when a device supplied truncated or malformed firmware. The patch replaces this unbounded walk with helper functions that bound every EEPROM read to the actual data length, thus preventing out‑of‑bounds reads. Because the flaw only allows reading beyond a buffer, it can expose secret kernel memory contents, leading to information disclosure. This vulnerability can be classified as a classic out‑of‑bounds read, or buffer over‑read variant scenario.

All versions of the Linux kernel that include the AMDGPU driver before commit c990c05eb6c74c98d1ff3acf67a19015312820b7 are impacted. Any system that loads AMDGPU for an AMD GPU and is exposed to FRU firmware from that device is at risk.

The need to deliver the malicious firmware means the attacker must have some level of control over the device or ability to manipulate firmware data, which likely limits the threat only to local or physically compromised environments. The EPSS score of < 1% indicates a very low probability that this vulnerability will be exploited in the wild. Nonetheless, any disclosure of kernel memory warrants prompt mitigation.