Linux Kernel AMD GPU JPEG User Fence Vulnerability in Version 5.0.0

Vulnerability

A vulnerability in the Linux kernel's AMD GPU JPEG handling in version 5.0.0 has been addressed. The issue arose because JPEG rings do not accommodate 64-bit user fence writes, leading to the rejection of command stream submissions that included user fences. The vulnerability has been resolved by modifying the JPEG v5.0.0 ring to disable user fence support, ensuring compatibility with the ring's capabilities.

Impact

The vulnerability could cause command stream submissions with user fences to be incorrectly rejected, potentially disrupting processes that rely on this functionality.

Reproduction

To reproduce this issue, attempt to submit a command stream to a JPEG ring in the AMD GPU driver version 5.0.0 using a 64-bit user fence. The submission will be rejected, demonstrating the incompatibility and the need for the vulnerability fix.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.

Added: Jul 19, 2026, 3:40 PM
Updated: Jul 19, 2026, 3:40 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.9
remediation
7.7
relevance
9.7
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.