A vulnerability in the Linux kernel amdgpu driver allows local attackers to potentially access sensitive memory or corrupt system operations.

This is an improper initialization vulnerability in the drm/amdgpu driver. The vulnerability occurs because the GART TLB is not flushed after mapping, and the GART table is not zero-initialized upon allocation, requiring low-privileged local access (PR:L).

With a CVSS score of 8.8, this vulnerability poses a significant risk to the confidentiality, integrity, and availability of the host system. A local attacker could leverage this flaw to gain unauthorized access to kernel memory or cause system-wide instability.

Immediate Action: Update the Linux kernel to version 6.1.175, 6.6.140, 6.12.90, 6.18.32, or later stable releases.

Proactive Monitoring: Monitor system performance for abnormal behavior following graphics-intensive operations or memory allocation requests.

Compensating Controls: Implement strict local user access controls and audit system calls to ensure that only authorized users can interact with the amdgpu driver.

Public Exploit Available: No

Administrators managing systems with AMD GPUs should ensure their kernel versions are updated to the specified stable releases. Patching is critical to prevent local privilege escalation and unauthorized memory access.