A flaw in the Linux kernel AMDGPU driver allows a local authenticated user to cause memory corruption or denial of service by overwriting reserved doorbell mappings.

The vulnerability exists due to the use of an improper function (xa_store_irq) when managing user-queue doorbell mappings. This flaw allows a local authenticated attacker to overwrite existing mappings, which can misroute fence interrupt requests and corrupt cleanup processes.

Successful exploitation allows a local user to interfere with system stability and potentially gain unauthorized control over hardware-specific interrupt processing. With a CVSS score of 7.1, this vulnerability poses a significant risk to the integrity and availability of systems utilizing AMD graphics hardware, as it may lead to kernel-level crashes or privilege escalation scenarios.

Immediate Action: Update the Linux kernel to version 7.1.6 or later, or ensure the system is running a kernel version 6.16 or higher to incorporate the necessary fix.

Proactive Monitoring: Monitor system logs for unusual kernel panic events or repeated failures in the amdgpu driver module, which may indicate attempted exploitation.

Compensating Controls: Restrict access to the system to trusted users only, as the attack vector requires local access to the machine. Ensure that user-space applications have the minimum necessary privileges to prevent unauthorized interaction with GPU-related device files.

Public Exploit Available: Unknown

Given the potential for kernel-level impact and the ability of an authenticated attacker to manipulate hardware interrupt routing, this vulnerability should be treated with high priority. Organizations using Linux on hardware powered by AMD GPUs should verify their current kernel version and apply the upstream patches provided in the stable Linux kernel releases immediately to mitigate this risk.