CVE-2026-63844drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 2f6afc97d259d530f4f86c7743efbc573a8da927)
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e684e654eba9481a9f462a7bbf5c385b7d1c076e before b884ff67d62ef514eee9d5f605c03101c8b6bc98; from e684e654eba9481a9f462a7bbf5c385b7d1c076e before d6bd2a5fd611ec9c8a2411f084cff2435c709608; from e684e654eba9481a9f462a7bbf5c385b7d1c076e before 8549b3933038e68dc61cb934b9a54223dd244a78; from e684e654eba9481a9f462a7bbf5c385b7d1c076e before 249fa7549736de1c8e327d7ca6b32fa148a40bd6; from e684e654eba9481a9f462a7bbf5c385b7d1c076e before 83e37c0987ca92f9e87789b46dd311dcf5a4a6c8 | CNA record |
References
- https://git.kernel.org/stable/c/b884ff67d62ef514eee9d5f605c03101c8b6bc98
- https://git.kernel.org/stable/c/d6bd2a5fd611ec9c8a2411f084cff2435c709608
- https://git.kernel.org/stable/c/8549b3933038e68dc61cb934b9a54223dd244a78
- https://git.kernel.org/stable/c/249fa7549736de1c8e327d7ca6b32fa148a40bd6
- https://git.kernel.org/stable/c/83e37c0987ca92f9e87789b46dd311dcf5a4a6c8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.