---
id: CVE-2026-63845
title: 'drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring

  JPEG rings do not support 64-bit user fence writes, reject CS
  submissions with user fences.

  (cherry picked from …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 <
    d4e0172a1b614373385e9b7111b580f8d2e0b98f
  - >-
    Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 <
    a676f16ea9a7df96d69f405afb6eb349571b3382
  - >-
    Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 <
    6876d05b899102f4dfdb9ad560132126144c1c72
  - >-
    Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 <
    af4b458daa597dae707bf3f1f74745f5fc133ca2
  - >-
    Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 <
    e7e90b5839aeb8805ec83bb4da610b8dab8e184d
  - Linux 5.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:31:53.434851Z'
published: '2026-07-19'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:42:06.715Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-63845'
references:
  - url: 'https://git.kernel.org/stable/c/d4e0172a1b614373385e9b7111b580f8d2e0b98f'
  - url: 'https://git.kernel.org/stable/c/a676f16ea9a7df96d69f405afb6eb349571b3382'
  - url: 'https://git.kernel.org/stable/c/6876d05b899102f4dfdb9ad560132126144c1c72'
  - url: 'https://git.kernel.org/stable/c/af4b458daa597dae707bf3f1f74745f5fc133ca2'
  - url: 'https://git.kernel.org/stable/c/e7e90b5839aeb8805ec83bb4da610b8dab8e184d'
tags:
  - cve.org
epss: 0.00175
epssPercentile: 0.0654
ingestedAt: '2026-10-16T17:24:46.757Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring

JPEG rings do not support 64-bit user fence writes, reject CS
submissions with user fences.

(cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a)

## Affected

- `Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 < d4e0172a1b614373385e9b7111b580f8d2e0b98f`
- `Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 < a676f16ea9a7df96d69f405afb6eb349571b3382`
- `Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 < 6876d05b899102f4dfdb9ad560132126144c1c72`
- `Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 < af4b458daa597dae707bf3f1f74745f5fc133ca2`
- `Linux >= b13111de32a9202c6d58bb7e4c06296b99c4d7e3 < e7e90b5839aeb8805ec83bb4da610b8dab8e184d`
- `Linux 5.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.