A vulnerability in the Linux kernel AMDGPU driver allows for potential memory corruption via a race condition in the coredump ring dump mechanism.

This is a memory corruption vulnerability caused by a race condition between two loops in the amdgpu_coredump function. An authenticated local user can trigger this flaw by manipulating GPU activity, leading to a slab-out-of-bounds access during the coredump generation.

The CVSS score of 7.8 highlights the high severity of this memory corruption flaw. Successful exploitation could lead to system crashes, unauthorized memory access, or potential privilege escalation, depending on the nature of the corrupted slab data.

Immediate Action: Update the Linux kernel to version 7.1.5 or later.

Proactive Monitoring: Monitor for kernel logs indicating slab corruption or GPU driver crashes.

Compensating Controls: Limit access to GPU device nodes to authorized users, as the exploit requires local access to interact with the device driver.

Public Exploit Available: false

Due to the risk of memory corruption and potential system-wide impact, users of systems utilizing AMD GPUs should apply the kernel patch to version 7.1.5 immediately. Ensuring the kernel is up to date is the most effective way to address this race condition.