Riskcovery

CVE-2026-63842

drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring

State
Published
Severity
7.8 High
Published
Jul 19, 2026
Updated
Oct 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring

JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences.

(cherry picked from commit 0f43893d3cd478fa57836697525b338817c9c23d)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
LinuxLinux
  • dfad65c65728401587142577dd283476491bac83 to before 3a55ff19a6ff5e046d6a4a18e36deec5d95d9a2eAffected
  • dfad65c65728401587142577dd283476491bac83 to before a7e63bb93a7fde3c8920984c3deee9acfe461562Affected
  • dfad65c65728401587142577dd283476491bac83 to before 69ab75c7c5f378eb46f4c918aa848bb5c5603924Affected
  • dfad65c65728401587142577dd283476491bac83 to before ea7c61c5f895e8f9ea0ffffa180498ef9c740152Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.