A high-severity use-after-free vulnerability in the Linux kernel amdxdna accelerator driver could allow a local attacker with low privileges to achieve privilege escalation or system disruption.

This is a use-after-free vulnerability occurring within the amdxdna accelerator driver. When the force_iova mode is active, the device removal process prematurely frees the iommu domain, leading to potential memory corruption if the domain is accessed subsequently by the gem object free function.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for significant impact on system integrity and availability. An attacker with local access could leverage this memory corruption to gain elevated privileges or crash the system, resulting in unauthorized access to sensitive data or critical service downtime.

Immediate Action: Update the Linux kernel to version 7.1.5 or later, or apply the upstream patches provided by the kernel maintainers.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the amdxdna driver that may indicate unsuccessful or successful exploitation attempts.

Compensating Controls: Restrict local system access to authorized personnel only, as the vulnerability requires a local attacker with low privileges to trigger the race condition.

Public Exploit Available: No

Given the high CVSS score and the nature of kernel-level vulnerabilities, organizations should prioritize patching affected Linux distributions as part of their standard maintenance cycle. Promptly updating to a fixed kernel version is the only effective way to eliminate the underlying race condition and prevent potential local privilege escalation.