A local integer overflow vulnerability in the AMD Xilinx Run Time (XRT) driver, identified as CVE-2025-52538, presents a significant risk of unauthorized data access or system disruption.

This vulnerability is caused by improper input validation within the XOCL driver, which facilitates an integer overflow condition when triggered by a local attacker. The vulnerability requires local access but does not necessitate specific user privileges (PR:N).

Successful exploitation of this integer overflow can lead to a loss of system confidentiality or availability, potentially enabling an attacker to read sensitive data or crash the affected system. Given the CVSS score of 8.0, this is categorized as a high-severity flaw, necessitating prompt remediation to prevent local privilege escalation or denial-of-service scenarios.

Immediate Action: Update the AMD Xilinx Run Time (XRT) to version 2025.1 or later to address the vulnerable XOCL driver.

Proactive Monitoring: Monitor system logs for unusual driver activity or unexpected process crashes that may indicate an attempt to trigger the integer overflow.

Compensating Controls: Restrict local access to the affected system to authorized users only, as the vulnerability requires local interaction to exploit.

Public Exploit Available: No.

The high CVSS score reflects the serious potential for system-level impact should an attacker successfully trigger the integer overflow. IT administrators should prioritize upgrading to the 2025.1 release of the Xilinx Run Time environment across all affected deployments to effectively eliminate this vulnerability.