This vulnerability is a TOCTOU race condition (CWE-367) in the ioctl path of the MxGPU-Virtualization driver for AMD Radeon™ PRO V620. Concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler can be exploited to trigger a heap-based buffer overflow. The CVSS 4.0 base score is 2.0, indicating low severity. The vulnerability could result in denial-of-service but does not appear to allow privilege escalation or code execution. No patch or official remediation level has been published by AMD as of the data provided.

The primary impact is a potential denial-of-service condition caused by a heap-based buffer overflow triggered through a race condition in the driver. The vulnerability requires local access with low privileges and high attack complexity, limiting its exploitability. There is no indication of remote exploitation or impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limiting access to the vulnerable driver and avoiding concurrent ioctl calls that could trigger the race condition may reduce risk. Monitor AMD advisories for updates.