The Linux kernel’s accel/amdxdna driver previously allowed device buffers to be exported, a capability that should have been disabled. This exposed kernel and device data to user‑space, potentially leaking sensitive information. The flaw represents weaknesses in access control and information exposure (CWE‑284, CWE‑200).

All Linux kernel builds that contain the accel/amdxdna driver with buffer‑export support enabled, up to and including the commit that disables this feature. Distributions shipping kernels prior to that commit are potentially affected; specific vulnerable version ranges are not listed in the CVE data.

The CVSS score of 7.8 marks this vulnerability as high severity, but the EPSS score of <1 % suggests a low likelihood of exploitation. It is inferred that an attacker would need local or privileged kernel access to trigger the export or read the exposed buffers. The vulnerability is not listed in CISA’s KEV catalog, and no public exploits are documented, though the risk of data leakage remains if privileged processes are compromised.