The Linux kernel’s AMDGPU JPEG driver contains a flaw that causes the JPEG command ring to reject submissions that include 64‑bit user fence values. When a client sends JPEG work with such fences, the ring cannot process the command, resulting in a failure of GPU‑accelerated JPEG encoding or decoding. The failure can stall or terminate applications that rely on fast JPEG processing, thereby causing a denial of service in services that depend on this functionality.

Any Linux kernel that uses the AMDGPU JPEG driver and does not yet include the patch added by commit 86ac011e is affected. This includes mainline kernels and distribution kernels prior to the inclusion of that commit. Kernels that have incorporated the change are not vulnerable.

The vulnerability has a CVSS score of 7.8, indicating high severity, while the EPSS score of less than 1 % suggests a very low probability of exploitation in the wild. It is not listed in the CISA KEV catalog. Based on the description it is inferred that an attacker needs local or privileged access to submit a JPEG command that triggers the failure; there is no remote code execution path. The resulting denial of service would limit impact to the affected application or service rather than the entire system.