CVE-2026-63841: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/jpeg: set nouserfence for JPEG v5.0.1 ring
JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences.
(cherry picked from commit 742a98e2e81702df8fe1b1eccee5223220a03dc2)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set no_user_fence for the JPEG v5.0.1 ring to reject command submissions with user fences.
Linux kernel AMDGPU JPEG v5.0.1 ring no_user_fence = true
Event History
Frequently Asked Questions
What systems are exposed to this issue?
The issue applies to Linux kernel systems using the AMDGPU JPEG v5.0.1 ring. The affected condition concerns command submissions that request user-fence writes.
What access does an attacker need to exploit it?
The supplied vector indicates local access, low attack complexity, and low privileges required. No user interaction is required.
What behavior does the fix introduce?
The fix marks the JPEG v5.0.1 ring as not supporting user fences and rejects command-stream submissions containing user fences. JPEG rings do not support 64-bit user-fence writes.