If your PC is prone to those dreaded 'blue screen of death' (BSOD) errors and you are running a Radeon GPU, the culprit could be your graphics driver. And more specifically, a denial-of-service vulnerability that will not be fixed until sometime next year.
Security researchers at Cisco discovered the security flaw, noting that it can be "triggered by executing the D3DKMTCreateAllocation function with malformed data. This leads to an out-of-bounds read vulnerability in AMD ATIKMDAG.SYS driver."
The resulting actions by an attacker could potentially lead to an out-of-bounds read exploit and denial-of-service, which in turns crashes the PC with a BSOD. It can also be triggered by non-privileged (read: guest) accounts.
Best CPU for gaming: the top chips from Intel and AMD
Best graphics card: your perfect pixel-pusher awaits
Best SSD for gaming: get into the game ahead of the rest
This particular vulnerability has a 7.1 Common Vulnerability Scoring System (CVSS) rating, based on a 0 to 10 scale, with 10 being the most serious. AMD acknowledged Cisco's disclosure and the possibility for a BSOD to occur, but said it believes "confidential information and long-term functionality are not impacted." So it sounds more like a potential annoyance than a serious security threat.
Putting on its Captain Obvious cap, AMD also said an affected user "can resolve the issue by restarting the computer." That's opposed to staring at a BSOD forever—blue is supposed to have a calming effect, after all—if your PC is not already configured to automatically restart after a crash.
AMD will offer a more permanent fix through a future graphics driver update, in the first quarter of 2021.
