A high-severity vulnerability in the Linux kernel amdgpu graphics driver allows local authenticated attackers to achieve complete system compromise.

This issue involves improper handling of 64-bit user fence writes in the DRM amdgpu JPEG ring buffer component, requiring low local privileges and no user interaction for successful exploitation.

A successful exploit of this vulnerability could allow an attacker with local system access to achieve high impacts on confidentiality, integrity, and availability, effectively granting full control over the host operating system. This justifies the CVSS score of 7.8, representing a severe risk for multi-tenant environments, workstations, or servers where untrusted local users may execute code.

Immediate Action: Update the Linux kernel to version 6.12.91, 6.18.33, 7.0.10, or later, depending on the active distribution branch.

Proactive Monitoring: Monitor system logs for unauthorized local user activity, abnormal kernel crashes, or suspicious execution of command-line utilities.

Compensating Controls: Restrict local shell access and apply the principle of least privilege to minimize the number of users capable of executing code on the system.

Public Exploit Available: false

Administrators managing affected Linux kernel distributions must prioritize applying the latest upstream security patches or vendor-supplied kernel updates. Prompt remediation is critical to prevent local privilege escalation and maintain the overall security posture of the infrastructure.