A high-severity use-after-free vulnerability in the Linux kernel amdgpu driver could allow a local attacker with low privileges to achieve code execution or system instability.

This is a use-after-free vulnerability occurring within the amdgpu_dpm_get_pp_table function. An attacker with local access and low privileges can exploit this flaw by triggering specific power management sequences, leading to potential arbitrary code execution.

Successful exploitation of this vulnerability allows a local attacker to compromise the integrity and availability of the host system. Given the CVSS score of 7.8, this represents a significant risk, as it could lead to full system compromise or denial-of-service conditions, particularly in multi-tenant environments or shared server infrastructure.

Immediate Action: Update the Linux kernel to version 7.1.8 or later, or apply the specific upstream patch commits provided by the vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected driver crashes associated with the amdgpu module.

Compensating Controls: Limit access to the system to trusted users only and implement kernel hardening features, such as disabling unprivileged user namespaces if not required.

Public Exploit Available: No

While this vulnerability requires local access, the high severity score mandates that administrators prioritize patching. System administrators should verify their current kernel version and apply the recommended updates to mitigate the risk of local privilege escalation.