The vulnerability in the Linux kernel’s AMDGPU VCN v5.0.0 ring causes the kernel to reject command submissions that contain 64‑bit user fence values. This rejection stops video encode and decode operations, effectively denying use of GPU‑accelerated video functions for affected users. The weakness arises from improper handling of user data in the fence logic, reflected in CWE‑1287 and CWE‑20.

All Linux kernel versions that include the unpatched AMDGPU VCN v5.0.0 ring implementation. This includes any distribution or custom kernel that has not incorporated the security commit 49b1fbbb5a071197ee71e2d70959b1cb29bdc317. Systems using AMD GPUs with hardware video acceleration enabled are at risk because the kernel will reject CS submissions involving 64‑bit user fences.

With a CVSS score of 7.8 the vulnerability is considered high severity. An EPSS score of less than 1% and absence from the CISA KEV catalog suggest a low probability of exploitation in the wild. Exploitation would require local kernel execution or privileged access to the AMDGPU driver; purely remote exploitation is not feasible. Based on the description, it is inferred that only a user with local privilege can trigger the fault, making remote attacks unlikely.