A use-after-free vulnerability in the Linux kernel AMD display driver could allow a local authenticated attacker to trigger system instability or execute arbitrary code.

The vulnerability exists within the dm_update_crtc_state function of the AMD display driver. An improper handling of the new_stream pointer during error scenarios leads to a double-free, which can be exploited by an attacker with local, low-privileged access to corrupt kernel memory.

The CVSS score of 7.8 indicates a high-severity risk, primarily due to the potential for complete system compromise. While the attack vector is local, a successful exploit allows an attacker to escalate privileges or cause a kernel panic, leading to significant service disruption and potential unauthorized access to sensitive data stored in memory.

Immediate Action: Update the Linux kernel to version 6.6.148, 6.12.101, 6.18.42, 7.1.6, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected system reboots that may indicate exploitation attempts targeting memory corruption.

Compensating Controls: Restrict local access to the affected hardware systems to only authorized personnel, and implement kernel hardening features such as KASLR to increase the difficulty of successful exploitation.

Public Exploit Available: No

The risk posed by this use-after-free vulnerability is significant for environments where local access is provided to untrusted users or applications. Administrators should prioritize the deployment of patched kernel versions across all affected Linux distributions to eliminate the underlying memory corruption risk.