The kernel contains a flaw in the AMDGPU driver’s JPEG ring where 64‑bit user fence writes are mishandled, causing the driver to reject command submissions that contain such fences. The result is an interruption of JPEG processing and loss of GPU acceleration for applications that rely on that functionality. This weakness is classified as CWE‑1287, CWE‑20, and CWE‑754, indicating a misuse of hardware resources and improper handling of user‑supplied data. The impact is a denial of service against the GPU user space, potentially crashing or stalling graphics‑related workloads on affected systems.

Any Linux system that includes the amdgpu module with JPEG ring support and has not incorporated the patch from commit 0f43893d3cd478fa57836697525b338817c9c23d is potentially affected. This includes most mainstream distributions that ship the default amdgpu driver and enable GPU acceleration. Systems that use a different driver, or that have already applied the kernel update, are not impacted.

The CVSS score of 7.8 denotes high severity, while the EPSS score of <1% indicates a very low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. It is inferred from the description that local access is required to exploit the flaw, as the driver fault is triggered by user‑provided data during GPU command submission, and no remote exploitation vector is documented.