Linux Kernel AMD GPU JPEG V2.5 Ring User Fence Vulnerability

Vulnerability

A vulnerability in the Linux kernel's AMD GPU JPEG V2.5 ring has been addressed. This issue arose because JPEG rings do not accommodate 64-bit user fence writes, leading to the rejection of command stream submissions that included user fences. The vulnerability has been resolved by modifying the JPEG V2.5 ring to disable user fence support, ensuring compatibility with the ring's operational requirements.

Impact

The vulnerability could have led to improper handling of command stream submissions in the JPEG V2.5 ring, potentially causing issues in applications relying on this functionality.

Reproduction

The vulnerability could be reproduced by attempting to submit a command stream to the JPEG V2.5 ring with a 64-bit user fence. The submission would be rejected due to the ring's inability to process such user fence writes.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the official Linux kernel website.

Added: Jul 19, 2026, 3:38 PM
Updated: Jul 19, 2026, 3:38 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.9
remediation
7.7
relevance
10.0
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.