A high-severity out-of-bounds read vulnerability in the Linux kernel amdkfd driver could allow local attackers to compromise system integrity and availability.

The CRAT parser fails to verify that the advertised subtype length in a CRAT table fits within the image boundaries. This allows a local, unauthenticated attacker to trigger an out-of-bounds read when the kernel parses malformed CRAT structures.

Successful exploitation of this vulnerability can lead to information disclosure or system instability, potentially resulting in a kernel panic or denial of service. With a CVSS score of 8.0, this flaw represents a significant risk to system availability and data confidentiality, particularly in environments relying on AMD GPU compute functionality.

Immediate Action: Update the Linux kernel to version 7.1.10 or later, or apply the upstream patches provided by the kernel stable maintainers.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or segmentation faults related to the amdkfd driver or display subsystem.

Compensating Controls: Restrict access to the system to authorized users only, as the attack vector requires local access to the hardware or execution environment.

Public Exploit Available: Unknown

Given the potential for system disruption and the critical nature of the Linux kernel, organizations should prioritize patching affected systems. Administrators must verify their kernel versions and apply the security updates as soon as they are integrated into their respective distribution release channels to mitigate the risk of local exploitation.