A GitHub PoC claims AMD uProf Power Profiler exposes a named shared section with a NULL DACL, then lets user-controlled shared memory steer a kernel write through offset 0x10. The retained scrape cuts off mid-file, so treat this as a strong triage lead rather than a fully reproduced exploit.