The Linux kernel unintentionally allowed the accel/amdxdna driver to export device buffers. These buffers can contain sensitive kernel or device data that should remain private. Exporting them could enable privileged or compromised user-space processes to read data that they should not have access to, resulting in information disclosure.

The fix was applied in the Linux kernel across all distributions that use the default accel/amdxdna driver. No specific vulnerable version range is listed, so any kernel build that includes the driver before the commit referenced in the advisory is potentially affected. The referenced commits (33b00fa8 and 9480dd7e) indicate the change is in the driver code within the mainline kernel source tree.

The vulnerability has no publicly available EPSS score and is not listed in the CISA KEV catalog, suggesting limited known exploitation activity. Attackers would need kernel or privileged user rights to trigger buffer export or to consume the exported data, indicating a local abuse vector. While exploitation would be constrained to machines with such privileges, the potential for sensitive data leakage makes the risk moderate to high in environments where privileged processes run.