---
id: CVE-2026-63848
title: 'drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring

  JPEG rings do not support 64-bit user fence writes, reject CS
  submissions with user fences.

  (cherry picked from …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 <
    f675801889b265634aefd30aa4503fc2b9e6ce1c
  - >-
    Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 <
    2e216c2ff159b2eb1da6e9c716d727efc73c64b5
  - >-
    Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 <
    b41248d1c18384835f6532e68592ee07605da283
  - >-
    Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 <
    41c4f3f68a343d62bd352a95ace93a11c4ad92ed
  - >-
    Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 <
    e5f612dc91650561fe2b5b76dd6d2898ec9ad480
  - Linux 5.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:32:04.759041Z'
published: '2026-07-19'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:42:07.123Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-63848'
references:
  - url: 'https://git.kernel.org/stable/c/f675801889b265634aefd30aa4503fc2b9e6ce1c'
  - url: 'https://git.kernel.org/stable/c/2e216c2ff159b2eb1da6e9c716d727efc73c64b5'
  - url: 'https://git.kernel.org/stable/c/b41248d1c18384835f6532e68592ee07605da283'
  - url: 'https://git.kernel.org/stable/c/41c4f3f68a343d62bd352a95ace93a11c4ad92ed'
  - url: 'https://git.kernel.org/stable/c/e5f612dc91650561fe2b5b76dd6d2898ec9ad480'
tags:
  - cve.org
epss: 0.00175
epssPercentile: 0.06559
ingestedAt: '2026-10-16T17:24:46.758Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring

JPEG rings do not support 64-bit user fence writes, reject CS
submissions with user fences.

(cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143)

## Affected

- `Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 < f675801889b265634aefd30aa4503fc2b9e6ce1c`
- `Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 < 2e216c2ff159b2eb1da6e9c716d727efc73c64b5`
- `Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 < b41248d1c18384835f6532e68592ee07605da283`
- `Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 < 41c4f3f68a343d62bd352a95ace93a11c4ad92ed`
- `Linux >= 6ac27241106bc946bd50032f4cd96899c6a6fe69 < e5f612dc91650561fe2b5b76dd6d2898ec9ad480`
- `Linux 5.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.