An out-of-bounds read vulnerability in the Linux kernel AMD display driver allows local users with low privileges to compromise system confidentiality, integrity, and availability.

This is an out-of-bounds read flaw caused by inadequate table size validation within the get_gpio_i2c_info() and bios_parser_get_gpio_pin_info() functions in the AMD display driver, requiring low privileges and local access.

A successful exploit of this vulnerability can lead to a complete compromise of system confidentiality, integrity, and availability, as attackers may read sensitive kernel memory or trigger crashes. With a CVSS score of 7.8, this high-severity flaw threatens internal environments where multi-tenant or untrusted local user access exists.

Immediate Action: Update the Linux kernel to version 6.1.175, 6.6.142, 6.12.92, or 6.18.34, depending on your active stable branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual driver error messages related to the AMD display subsystem.

Compensating Controls: Restrict local interactive shell access to trusted users and enforce strict permission controls to limit exposure to low-privileged accounts.

Public Exploit Available: false

Administrators must prioritize updating vulnerable Linux kernel packages to the patched versions immediately to eliminate the risk of local privilege escalation and memory exposure. Testing and deploying these kernel updates across affected enterprise environments is strongly advised.