The amdgpu driver in the Linux kernel accepts any buffer object (BO) as a doorbell handle even when that BO was not created in the dedicated doorbell domain. When such a BO is pinned, the TTM subsystem moves it and its contents are lost. An importer can obtain a GEM object that another process has exported, so a malicious user‑mode process can target a buffer shared with a victim. This results in unintended data loss or tampering of shared GPU memory. The flaw is based on CWE-1287.

Any Linux installation that includes the amdgpu driver before the patch referenced in the advisory. All vendors shipping an unpatched amdgpu driver for AMD GPUs are affected; users operating a system with an AMD GPU and the buggy kernel driver are at risk.

The vulnerability requires a local user with the ability to create and share buffer objects. The CVSS score of 4.4 indicates moderate impact, and the EPSS score of less than 1% suggests a low likelihood of exploitation. It is not listed in CISA’s KEV catalog. Because exploitation is limited to local users and the impact is confined to the integrity of shared GPU memory, the overall risk is considered medium.