{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63843", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.015Z", "datePublished": "2026-07-19T14:04:37.815Z", "dateUpdated": "2026-07-20T13:40:40.562Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:40:40.562Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit f05d0a4f21fc720116d6e238f23308b199891058)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_5.c"], "versions": [{"version": "8f98a715da8e906cff5c635f9eb5399b84751557", "lessThan": "424510b60d4698a75a6ff71acdd88b528f0f39af", "status": "affected", "versionType": "git"}, {"version": "8f98a715da8e906cff5c635f9eb5399b84751557", "lessThan": "f26e3f7186cd6ecc93e6af102744d64c798dea7e", "status": "affected", "versionType": "git"}, {"version": "8f98a715da8e906cff5c635f9eb5399b84751557", "lessThan": "f9bc5633b761cff200c428f61ed0df6212b1c721", "status": "affected", "versionType": "git"}, {"version": "8f98a715da8e906cff5c635f9eb5399b84751557", "lessThan": "b65b7f3f3c18f797f81a2af7c97e2079900ad6db", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_5.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/424510b60d4698a75a6ff71acdd88b528f0f39af"}, {"url": "https://git.kernel.org/stable/c/f26e3f7186cd6ecc93e6af102744d64c798dea7e"}, {"url": "https://git.kernel.org/stable/c/f9bc5633b761cff200c428f61ed0df6212b1c721"}, {"url": "https://git.kernel.org/stable/c/b65b7f3f3c18f797f81a2af7c97e2079900ad6db"}], "title": "drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring", "id": "2502302", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502302"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-229", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n(cherry picked from commit f05d0a4f21fc720116d6e238f23308b199891058)", "A flaw was found in the Linux kernel's AMD GPU (Graphics Processing Unit) JPEG (Joint Photographic Experts Group) component. This vulnerability arises because the JPEG v4.0.5 ring does not correctly support 64-bit user fence writes. A local attacker could exploit this by submitting commands with 64-bit user fences, leading to the rejection of these submissions and potentially causing a denial of service for affected operations."], "name": "CVE-2026-63843", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63843\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63843\nhttps://lore.kernel.org/linux-cve-announce/2026071929-CVE-2026-63843-a40b@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8f98a715da8e906cff5c635f9eb5399b84751557,424510b60d4698a75a6ff71acdd88b528f0f39af)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8f98a715da8e906cff5c635f9eb5399b84751557,f26e3f7186cd6ecc93e6af102744d64c798dea7e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8f98a715da8e906cff5c635f9eb5399b84751557,f9bc5633b761cff200c428f61ed0df6212b1c721)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[8f98a715da8e906cff5c635f9eb5399b84751557,b65b7f3f3c18f797f81a2af7c97e2079900ad6db)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.91,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.33,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.10,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T02:30:17.331479+00:00", "updated": "2026-07-21T02:30:17.331520+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}