Executive brief
A vulnerability was identified in the Linux kernel's AMD graphics driver (amdgpu) specifically affecting systems using JPEG v2.0 hardware acceleration. The driver incorrectly allowed certain command submissions that the hardware could not safely process, potentially leading to system instability or unexpected behavior. This issue has been resolved by ensuring the driver rejects unsupported requests.
Technical details
A vulnerability in the Linux kernel's amdgpu driver was discovered where the JPEG v2.0 ring component did not properly signal its lack of support for 64-bit user fence writes. This allowed Command Submission (CS) requests containing user fences to be processed despite hardware limitations. The fix involves setting the 'no_user_fence' flag to true in the jpeg_v2_0_dec_ring_vm_funcs structure, ensuring the kernel rejects these unsupported submissions. This prevents potential memory corruption or hardware hangs resulting from invalid fence operations.
Affected products
- Linux Linux Kernel amdgpu driver with JPEG v2.0 support
Timeline
- 2026-04-27: other: Initial patch authored
- 2026-07-19: advisory: NVD publication date
References
- https://git.kernel.org/stable/c/2e216c2ff159b2eb1da6e9c716d727efc73c64b5
- https://git.kernel.org/stable/c/41c4f3f68a343d62bd352a95ace93a11c4ad92ed
- https://git.kernel.org/stable/c/b41248d1c18384835f6532e68592ee07605da283
- https://git.kernel.org/stable/c/e5f612dc91650561fe2b5b76dd6d2898ec9ad480
- https://git.kernel.org/stable/c/f675801889b265634aefd30aa4503fc2b9e6ce1c