Local privilege escalation via AMDGPU buffer overflow

Heap buffer overflow in Linux kernel AMDGPU debugfs allows local users to escalate privileges through an oversized read request. amdgpu_debugfs_gprwave_read accepts an unchecked size above 4 KiB; wave_read_regs then writes size-divided register words past a fixed 4096-byte heap buffer, and the read path copies the requested length to user space. Exploitation requires access to the amdgpu_gprwave debugfs node on a system using the AMDGPU driver, exposing adjacent kernel memory to disclosure or corruption and allowing a kernel crash or privilege escalation.