Impact
In the Linux kernel, the AMDGPU VCN encoder and decoder rings implementation does not support 64‑bit user fence writes. When a command stream includes a 64‑bit user fence, the rings reject the submission, causing the kernel to fail the command stream. This results in failures for GPU media encode/decode workloads. The vulnerability is classified under CWE‑617.
Affected Systems
All Linux kernel versions that include the AMDGPU driver with VCN v2.0 enabled are affected. This includes any distribution that ships a kernel containing the drm/amdgpu/vcn component. The defect is present whenever the VCN v2.0 encoder or decoder rings are active, irrespective of the particular distribution.
Risk and Exploitability
The CVSS base score of 7.8 indicates high severity. The EPSS score is less than 1%, suggesting a low probability of exploitation at the present time. The vulnerability is not listed in the CISA KEV catalog, so no known live exploits are documented. Likely attack vectors are local or privileged; a user with kernel or driver access that can submit GPU command streams may trigger the failure. The flaw does not provide a path to remote code execution or privilege escalation.
OpenCVE Enrichment
Ubuntu USN