Linux Kernel AMDGPU JPEG V4.0.3 Ring User Fence Vulnerability

Vulnerability

A vulnerability in the Linux kernel's AMDGPU JPEG V4.0.3 ring has been addressed. This issue arose because JPEG rings do not accommodate 64-bit user fence writes, leading to the rejection of command stream submissions that included user fences. The vulnerability has been resolved by modifying the ring's configuration to disable user fence support, ensuring compatibility with the expected operation of the JPEG hardware.

Impact

The vulnerability could cause improper handling of command stream submissions, potentially leading to application errors or degraded performance when using JPEG hardware acceleration.

Reproduction

The vulnerability can be reproduced by attempting to submit a command stream to the AMDGPU JPEG V4.0.3 ring that includes a 64-bit user fence. The ring will reject the submission due to the unsupported user fence format.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched kernel are available on the official Linux kernel website.

Added: Jul 19, 2026, 3:40 PM
Updated: Jul 19, 2026, 3:40 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.9
remediation
7.7
relevance
10.0
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.