A memory disclosure vulnerability in the Linux kernel amdkfd driver could allow an authenticated local attacker to read sensitive kernel data.

The amdkfd driver fails to properly bound the MQD control stack copy during CRIU checkpointing, resulting in a buffer over-read that exposes adjacent kernel memory to local users with low privileges.

The vulnerability carries a CVSS score of 7.1, reflecting a high severity risk due to the potential for unauthorized access to sensitive kernel-level information. Successful exploitation could lead to the compromise of cryptographic keys, system memory addresses, or other secrets stored in kernel space, facilitating further privilege escalation or system instability.

Immediate Action: Update the Linux kernel to version 7.1.6 or later, or apply the relevant upstream patches referenced in the security advisory.

Proactive Monitoring: Monitor system logs for unusual memory access patterns or unexpected crashes related to the amdkfd driver module.

Compensating Controls: If immediate patching is not feasible, restrict access to the amdkfd device driver or disable CRIU functionality if it is not required for system operations.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the nature of kernel-level vulnerabilities, organizations should prioritize patching affected Linux distributions. Ensure that kernel updates are validated in a staging environment before deployment to production systems to prevent operational disruptions.