CVE-2026-63844: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/jpeg: set nouserfence for JPEG v4.0.3 ring
JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences.
(cherry picked from commit 2f6afc97d259d530f4f86c7743efbc573a8da927)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set no_user_fence for the JPEG v4.0.3 ring so CS submissions with user fences are rejected.
Linux kernel drm/amdgpu JPEG v4.0.3 ring no_user_fence = true
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63844?
CVE-2026-63844 has a severity rating of high with a score of 7.8.
How do I fix CVE-2026-63844?
To fix CVE-2026-63844, ensure that you update to the latest version of the Linux kernel where the vulnerability has been resolved.
What are the impacted systems for CVE-2026-63844?
CVE-2026-63844 affects systems running the Linux kernel, specifically those utilizing the amdgpu driver for JPEG processing.
What is the exploitability of CVE-2026-63844?
CVE-2026-63844 is considered to have low attack vector complexity, requiring local access to exploit.
What is the description of CVE-2026-63844?
CVE-2026-63844 addresses an issue in the Linux kernel's amdgpu driver regarding the handling of 64-bit user fence writes in JPEG rings.