A high-severity local privilege escalation vulnerability in the Linux kernel AMD GPU driver could allow an authenticated local attacker to achieve complete system compromise.

This is an improper control handling flaw in the drm/amdgpu JPEG driver where JPEG rings fail to support 64-bit user fence writes. An attacker with low local privileges and no user interaction can exploit this vulnerability.

A successful exploit of this vulnerability can lead to a complete compromise of confidentiality, integrity, and availability of the affected system. Because the flaw allows an attacker with low local access to execute arbitrary code or manipulate kernel memory, multi-tenant or shared hosting environments face severe risks of host breakout and data theft. The CVSS score of 7.8 reflects the high severity of local system compromise despite requiring local access.

Immediate Action: Update the Linux kernel to the fixed stable versions, specifically version 6.6.141, 6.12.91, 6.18.33, 7.0.10, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unauthorized access attempts originating from local user accounts.

Compensating Controls: Restrict local shell access and tightly control user permissions to ensure that only trusted personnel can execute code on the host operating system.

Public Exploit Available: No

System administrators maintaining systems with affected AMD GPU driver components must prioritize applying the latest upstream kernel patches. Prompt updating mitigates the risk of local privilege escalation and maintains the overall security posture of the infrastructure.