High 7.8Published Jul 19, 2026

CVE-2026-63841drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring

Updated under an hour ago (2026-10-19 07:30 UTC)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 742a98e2e81702df8fe1b1eccee5223220a03dc2)

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Awaiting Analysis
Record last updated: Oct 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b8f57b69942b2faa7deee0566cc9306316fe0a74 before d0f6ae14c0452be4fc3aa5cf81c74e68b3243050; from b8f57b69942b2faa7deee0566cc9306316fe0a74 before 869ce148c0d953570f8307c3e206b47bd5d3be99; from b8f57b69942b2faa7deee0566cc9306316fe0a74 before 2f8e3da71a1b469b6e157aa3972f1448b3157840	CNA record

References

https://git.kernel.org/stable/c/d0f6ae14c0452be4fc3aa5cf81c74e68b3243050
https://git.kernel.org/stable/c/869ce148c0d953570f8307c3e206b47bd5d3be99
https://git.kernel.org/stable/c/2f8e3da71a1b469b6e157aa3972f1448b3157840

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.