The Linux kernel’s AMDGPU JPEG driver contains a flaw that causes the JPEG ring to reject command submissions that include 64‑bit user fences. When a client submits JPEG work containing such fences, the ring cannot process the command and the operation fails. This results in the loss of GPU‑accelerated JPEG encoding or decoding and can cause applications that rely on fast JPEG processing to stall or terminate. The weakness is a defect in the driver’s handling of user‑supplied fencing information (CWE‑1287).

The vulnerability affects any Linux installation that uses the AMDGPU JPEG driver before the patch that adds support for 64‑bit user fence writes, identified by commit 86ac011e. This includes mainline and distribution kernels that have not yet incorporated this change. Systems running newer kernel releases that contain the patch are not affected.

The CVSS score of 7.8 indicates a high‑severity flaw, while the EPSS score of less than 1 % suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description it can be inferred that an attacker needs local access to submit a JPEG command that triggers the failure; it does not provide a remote code execution path. The resulting denial of service could interrupt services that rely on GPU JPEG acceleration, but the impact is limited to the affected application or service.