The bug in the AMD KFD driver calculates the end‑of‑packet ring buffer size using a logarithm that can return zero, leading to an integer underflow in a six‑bit field. The underflow would cause the calculated ring buffer size to become smaller than expected, potentially corrupting data handling within the graphics driver. The CVE description focuses on the mitigation of this incorrect calculation rather than stating a specific denial‑of‑service outcome.

Linux kernel builds that include the AMDKFD DRM driver before the application of commit f0f43fcf8b2b3a924cad9444340921c96ed5f634 are affected. No granular version range is given, so all kernels lacking this commit are considered vulnerable until updated.

The EPSS score indicates a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 5.5 indicates moderate severity. An attacker would need to trigger the EOP ring calculation path in the AMD KFD driver, implying a local execution or privilege‑escalation scenario. No publicly disclosed exploit exists at this time. Overall risk remains low, especially for systems that can apply the vendor patch promptly.