drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Linux Linux)

CVE-2026-63847
HIGH 7.8

At a glance

Source
NVD
EPSS
EPSS 0.18 % · percentile 7 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587)

Weaknesses (CWE)

  • CWE-20 — Improper Input Validation
  • CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 14f43e8f88c57bbeaed3d05f13efab733f5e2338 < c9e367e6e630e1655184ca886a9290bfe8cb30a9 ; affected 14f43e8f88c57bbeaed3d05f13efab733f5e2338 < 63691e396105611173072ad548fc2b68831ecf23 ; affected 14f43e8f88c57bbeaed3d05f13efab733f5e2338 < 4d96e3cbfc66e4d66ea0096bde858e28ab62da00 ; affected 14f43e8f88c57bbeaed3d05f13efab733f5e2338 < 3a96fee676fc0caf08f03ad915bec6fcd144d551 ; affected 14f43e8f88c57bbeaed3d05f13efab733f5e2338 < 694fe016969c5e5a24b9e0ef7c1307eedec8ddf8 ; affected 14f43e8f88c57bbeaed3d05f13efab733f5e2338 < 79405e774ede411c6b47ed41c651e40b92de64a2
Linux · Linuxaffected 5.6 ; unaffected 0 < 5.6 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.141 ≤ 6.6.* ; unaffected 6.12.91 ≤ 6.12.* ; unaffected 6.18.33 ≤ 6.18.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD