A high-severity memory corruption vulnerability in the Linux kernel amdgpu driver could allow a local attacker with low privileges to compromise system integrity and availability.

The amdgpu driver fails to enforce size limits on user-supplied Indirect Buffers (IB) during command submission. This allows a local, authenticated attacker to pass oversized values that corrupt adjacent control bits, leading to potential privilege escalation or denial of service.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for complete system compromise. Because the flaw exists within the kernel, a successful exploit grants an attacker significant control over the host, leading to unauthorized access, data loss, or prolonged system downtime. The risk is particularly acute in multi-tenant environments or shared compute infrastructure where untrusted users may have local access.

Immediate Action: Update the Linux kernel to version 6.12.105, 6.18.46, 7.1.10, or later versions as provided by your distribution maintainer.

Proactive Monitoring: Monitor system logs for kernel panics or repeated amdgpu driver errors, which may indicate attempted exploitation of this memory corruption flaw.

Compensating Controls: Restrict access to GPU-related device files to authorized users only, and ensure that untrusted users are not granted local interactive shell access to critical systems.

Public Exploit Available: Unknown.

Given the high CVSS score and the critical nature of kernel-level memory corruption, organizations should treat this update with high priority. Apply the provided kernel patches across all affected systems to prevent potential local privilege escalation and ensure continued system stability.