Impact
The AMDGPU VCN encoder and decoder rings in the Linux kernel lack support for 64‑bit user fence writes; when a command stream contains such a fence the rings reject the submission and the kernel marks the stream as failed. This failure disrupts GPU media encode and decode workloads and results in a denial of service for any application relying on these functions. The defect is a flaw in input validation and an assertion that can be reached, matching CWE‑20 and CWE‑617.
Affected Systems
All Linux kernel releases that ship with the drm/amdgpu/vcn component and have VCN v2.0 enabled are affected, including every distribution that uses the AMDGPU driver compiled into its kernel tree. Versions such as 7.1 rc1 and other kernel releases that contain the vulnerable VCN ring code are included.
Risk and Exploitability
The CVSS base score of 7.8 indicates high severity. The EPSS score is less than 1 %, indicating a low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or privileged, inferred from the fact that an entity capable of submitting GPU command streams can trigger the failure. No remote code execution or privilege escalation path is documented in the citation.
OpenCVE Enrichment
Ubuntu USN