A high-severity memory corruption vulnerability in the Linux kernel amdkfd driver could allow an authenticated local attacker to compromise system stability.

This vulnerability involves a uint32_t overflow when calculating EOP ring buffer size alignment within the amdkfd driver. An authenticated local user can trigger this overflow through specific queue property configurations, leading to heap-based memory corruption.

With a CVSS score of 7.8, this vulnerability poses a significant threat to organizational assets. Exploitation could allow an attacker to crash the host system or potentially escalate privileges, undermining the security posture of any environment utilizing AMD GPU acceleration.

Immediate Action: Update to kernel version 6.12.103, 6.18.44, 7.1.8, or later to incorporate the required overflow protections.

Proactive Monitoring: Monitor for kernel panic logs or unexpected driver restarts associated with the amdkfd module.

Compensating Controls: Limit access to GPU device nodes to authorized users only, reducing the attack surface for local exploitation.

Public Exploit Available: unknown

This vulnerability requires prompt attention. System administrators should verify their kernel versions and apply the recommended updates to prevent potential exploitation by malicious local actors.