A local privilege escalation vulnerability in the Linux kernel amdgpu VCN driver allows authenticated low-privileged users to achieve high impact across confidentiality, integrity, and availability.

This is an improper control flaw within the drm/amdgpu driver VCN encoder and decoder rings, which do not support 64-bit user fence writes and fail to reject command submission (CS) submissions with user fences. The attack requires low privileges with local access and no user interaction.

A successful exploit of this kernel vulnerability can lead to complete system compromise, allowing an attacker with local access to read or modify sensitive data, execute arbitrary code, and cause total system denial of service. The CVSS score of 7.8 reflects a high severity threat that requires immediate administrative attention to prevent host takeover.

Immediate Action: Update the Linux kernel to version 6.18.33, 7.0.10, or later where the fix is integrated.

Proactive Monitoring: Monitor system logs for unusual kernel crashes, segmentation faults, or unauthorized local execution attempts involving graphics drivers.

Compensating Controls: Restrict local shell access and limit user permissions on systems utilizing affected AMD hardware to trusted personnel only.

Public Exploit Available: false

Given the high CVSS score and potential for total system compromise, administrators must prioritize patching the Linux kernel immediately. Apply the vendor-supplied updates to affected kernel branches to permanently mitigate the risk of local privilege escalation.