A critical integer overflow vulnerability in the Linux kernel amdgpu driver permits local attackers with low privileges to achieve out-of-bounds memory access, potentially leading to system compromise.

This flaw involves an integer overflow within the amdgpu VCE command stream validation logic. An attacker with local access and low privileges can submit malformed, oversized image dimensions, causing the buffer size calculation to wrap to zero and bypassing subsequent security checks.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for severe impact on system integrity and availability. A successful exploit allows for out-of-bounds memory access, which could lead to arbitrary code execution within the kernel context, system crashes, or unauthorized access to sensitive data processed by the GPU. Given the kernel-level nature of the flaw, the potential for total system compromise is high.

Immediate Action: Update the Linux kernel to version 6.1.183, 6.6.148, 6.12.101, 6.18.42, or later, as provided by your distribution maintainer.

Proactive Monitoring: Monitor system logs for repeated GPU driver crashes or kernel panics, which may indicate attempted exploitation of the VCE driver.

Compensating Controls: Restrict access to GPU device nodes (e.g., /dev/dri/renderD*) to authorized users only, effectively limiting the attack surface for local, low-privileged actors.

Public Exploit Available: Unknown

The severity of this kernel-level vulnerability necessitates immediate attention, particularly for systems utilizing AMD graphics hardware. Administrators should prioritize the deployment of kernel updates provided by their respective Linux distributions to ensure the integrity of the system memory and prevent potential privilege escalation.