CVE-2026-63843

drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring

State: Published
Severity: 7.8 High
Published: Jul 19, 2026
Updated: Oct 19, 2026
Reserved: Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring

JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences.

(cherry picked from commit f05d0a4f21fc720116d6e238f23308b199891058)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
LinuxLinux	8f98a715da8e906cff5c635f9eb5399b84751557 to before 424510b60d4698a75a6ff71acdd88b528f0f39afAffected 8f98a715da8e906cff5c635f9eb5399b84751557 to before f26e3f7186cd6ecc93e6af102744d64c798dea7eAffected 8f98a715da8e906cff5c635f9eb5399b84751557 to before f9bc5633b761cff200c428f61ed0df6212b1c721Affected 8f98a715da8e906cff5c635f9eb5399b84751557 to before b65b7f3f3c18f797f81a2af7c97e2079900ad6dbAffected
LinuxLinux	6.7Affected before 6.7Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.