Linux Kernel AMDGPU JPEG V3.0 Ring User Fence Vulnerability

Vulnerability

A vulnerability in the Linux kernel's AMDGPU driver for JPEG V3.0 has been addressed. The issue arose because JPEG rings do not accommodate 64-bit user fence writes, leading to the rejection of command stream submissions that included user fences. The vulnerability has been resolved by modifying the JPEG V3.0 ring to disable user fence support, ensuring compatibility with the ring's capabilities.

Impact

The vulnerability could have led to improper handling of command stream submissions in the JPEG V3.0 ring, potentially causing issues in applications relying on this functionality.

Reproduction

The vulnerability can be reproduced by attempting to submit a command stream to the JPEG V3.0 ring with a 64-bit user fence. The submission will be rejected, highlighting the ring's lack of support for this type of user fence write.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel's official website.

Added: Jul 19, 2026, 3:38 PM
Updated: Jul 19, 2026, 3:38 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.9
remediation
7.7
relevance
10.0
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.