A high-severity use-after-free vulnerability in the Linux kernel AMD display driver could allow a local authenticated attacker to compromise system integrity and availability.

This is a memory management flaw involving a dangling pointer within the amdgpu_dm_plane_drm_plane_reset function. An attacker with local access can trigger this condition when a kzalloc call fails, resulting in the kernel retaining a pointer to freed memory, which can be leveraged for local privilege escalation or system instability.

The vulnerability carries a CVSS score of 7.0, reflecting its status as a high-severity flaw despite the requirement for local access. Successful exploitation could lead to full system compromise or denial of service, potentially resulting in unauthorized access to sensitive data or extended downtime for critical infrastructure running affected kernel versions.

Immediate Action: Update the Linux kernel to version 7.2.6 or newer, where the allocation logic has been corrected to prevent dangling pointers.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected memory access errors that may indicate an attempt to trigger this use-after-free condition.

Compensating Controls: Limit access to the local system to authorized personnel only, as the attack vector requires local user privileges and specific conditions to trigger the memory allocation failure.

Public Exploit Available: Unknown

Given the potential for system-wide compromise, administrators should prioritize patching the Linux kernel to the identified fixed version. While the requirement for local access and specific environmental conditions reduces the immediate risk, the severity of a kernel-level use-after-free necessitates prompt remediation to prevent potential local privilege escalation.