The Linux kernel previously lacked validation for AMDGPU user queue sizes. Without checks, a queue size not being a power of two or smaller than AMDGPU_GPU_PAGE_SIZE could cause GPU faults or unpredictable behavior, potentially crashing GPU-dependent processes.

The vulnerability affects Linux kernel builds that include the AMDGPU driver module. Exact kernel versions are unspecified, but any kernel lacking the recent validation change is vulnerable.

No CVSS or EPSS score is available, and the vulnerability is not listed in CISA KEV. The flaw is a kernel-level defect that could be exploited by an attacker with local or privileged access to trigger GPU faults, resulting in a denial of service for applications using the GPU. The lack of a publicly documented attack vector means the risk is primarily tied to local exploitation scenarios.