Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 5.0.0, < 5.0.1
A vulnerability in the Linux kernel's AMD GPU JPEG handling in version 5.0.0 has been addressed. The issue arose because JPEG rings do not accommodate 64-bit user fence writes, leading to the rejection of command stream submissions that included user fences. The vulnerability has been resolved by modifying the JPEG v5.0.0 ring to disable user fence support, ensuring compatibility with the ring's capabilities.
The vulnerability could cause command stream submissions with user fences to be incorrectly rejected, potentially disrupting processes that rely on this functionality.
To reproduce this issue, attempt to submit a command stream to a JPEG ring in the AMD GPU driver version 5.0.0 using a 64-bit user fence. The submission will be rejected, demonstrating the incompatibility and the need for the vulnerability fix.
Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.