The amdgpu driver in the Linux kernel contained a flaw where buffer objects (BOs) created before a user queue was established were not properly validated or referenced. This omission prevented evicted BOs from being rearmed with their eviction fence and failed to add the necessary reference before locking the BO. The result is potential use‑after‑free or kernel memory corruption when the GPU driver reuses these stale objects. An attacker with local access to the kernel’s GPU subsystem could construct such BOs and exploit the vulnerability to execute arbitrary code in kernel mode, leading to privilege escalation.

All Linux kernel releases that incorporate the amdgpu driver prior to the commit that introduced the patch (18decfc9e8cc0fa70b6de9944cc27a37729edfbd) are affected. No explicit version numbers are listed, but any system running a kernel that does not contain this commit is at risk. The vulnerability pertains solely to the amdgpu driver and not to the kernel as a whole.

The severity of this flaw is high because it results in kernel memory corruption and grants an attacker full kernel privileges. The EPSS score is not available and the vulnerability is not yet listed in CISA’s KEV catalog, yet the nature of the bug strongly indicates that exploitation is plausible. The attack vector is local; an attacker must be able to interact with the GPU subsystem, which typically requires physical or privileged access to the machine. Successful exploitation would allow execution of arbitrary code at ring 0 and complete compromise of the host.