The kernel’s amdgpu driver mishandles 64‑bit user fence writes for the JPEG v5.0.1 ring. When a user‑mode command includes an unsupported user fence value, the driver rejects the submission, causing the graphics pipeline to fail and potentially crash graphical contexts. This flaw does not allow code execution or data exfiltration, but it can lead to a denial of service by disrupting GPU‑accelerated applications. The weakness falls under CWE‑20, CWE‑241, and CWE‑754.

All Linux systems running a kernel version that has not integrated commit 742a98e2e81702df8fe1b1eccee5223220a03dc2 in the amdgpu driver are affected. This includes distribution kernels prior to the patch and custom kernel builds that compile an older amdgpu module. Users with access to the affected kernel through standard or proprietary distributions are within scope.

The CVSS score of 7.8 reflects a high severity, while the EPSS score of less than 1% and absence from CISA KEV indicate that exploitation is unlikely in the wild. The likely attack vector is local; an attacker who can execute GPU‑accelerated code or control a GPU context can trigger the fault. Successful exploitation results in GPU driver failure, leading to application crashes or service disruption, but it does not grant code execution or data exfiltration.