The Linux kernel previously did not validate AMDGPU user queue sizes, allowing sizes that were not powers of two or smaller than AMDGPU_GPU_PAGE_SIZE. Such misconfigurations can trigger GPU faults or cause unforeseen device behavior, disrupting processes that depend on GPU operations.

The flaw affects Linux kernel builds that include the AMDGPU driver. Any kernel lacking the recent validation commit is vulnerable; the exact kernel release is not specified in the data.

CVSS score of 5.5 and EPSS score of < 1% are provided, and the vulnerability is not listed in CISA KEV. The description does not establish an explicit attack vector; it is inferred that exploitation requires local or privileged access to configure queue sizes at the kernel level. Consequently, the risk is primarily local unless a remote configuration pathway is discovered.