The amdgpu JPEG ring processor in the Linux kernel mishandles 64‑bit user fence writes, accepting values without proper validation. The description indicates that the driver submits a corrupted command to the GPU when a user provides an invalid fence. Based on the description, it is inferred that such a corrupted command can cause the kernel to crash, resulting in service disruption for the affected machine. This flaw falls under CWE‑241, an unchecked return value leading to denial of service.

The flaw exists in the amdgpu driver that ships with the Linux kernel. Any Linux kernel release that contains the amdgpu JPEG ring code before the patch commit (commit 742a98e2e81702df8fe1b1eccee5223220a03dc2) is potentially affected. This includes standard distributions that ship unpatched kernels, as well as custom builds that compile the amdgpu module from older sources. No specific consumer products are cited; the impact is at the kernel level for any machine running a vulnerable kernel.

The CVSS score of 7.8 reflects a moderate‑to‑high severity. The EPSS score of less than 1% and the absence from the CISA KEV catalog indicate that exploitation remains unlikely in the wild. Based on the description, the likely attack vector is local, requiring a user or privileged process that can trigger a faulty fence or submit a corrupted buffer. Successful exploitation is inferred to result in a kernel crash and loss of service, but it does not provide remote code execution or data exfiltration.