{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63848", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.016Z", "datePublished": "2026-07-19T14:04:40.798Z", "dateUpdated": "2026-07-20T13:40:45.585Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:40:45.585Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c"], "versions": [{"version": "6ac27241106bc946bd50032f4cd96899c6a6fe69", "lessThan": "f675801889b265634aefd30aa4503fc2b9e6ce1c", "status": "affected", "versionType": "git"}, {"version": "6ac27241106bc946bd50032f4cd96899c6a6fe69", "lessThan": "2e216c2ff159b2eb1da6e9c716d727efc73c64b5", "status": "affected", "versionType": "git"}, {"version": "6ac27241106bc946bd50032f4cd96899c6a6fe69", "lessThan": "b41248d1c18384835f6532e68592ee07605da283", "status": "affected", "versionType": "git"}, {"version": "6ac27241106bc946bd50032f4cd96899c6a6fe69", "lessThan": "41c4f3f68a343d62bd352a95ace93a11c4ad92ed", "status": "affected", "versionType": "git"}, {"version": "6ac27241106bc946bd50032f4cd96899c6a6fe69", "lessThan": "e5f612dc91650561fe2b5b76dd6d2898ec9ad480", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c"], "versions": [{"version": "5.6", "status": "affected"}, {"version": "0", "lessThan": "5.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.6.141"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f675801889b265634aefd30aa4503fc2b9e6ce1c"}, {"url": "https://git.kernel.org/stable/c/2e216c2ff159b2eb1da6e9c716d727efc73c64b5"}, {"url": "https://git.kernel.org/stable/c/b41248d1c18384835f6532e68592ee07605da283"}, {"url": "https://git.kernel.org/stable/c/41c4f3f68a343d62bd352a95ace93a11c4ad92ed"}, {"url": "https://git.kernel.org/stable/c/e5f612dc91650561fe2b5b76dd6d2898ec9ad480"}], "title": "drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring", "id": "2502291", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502291"}, "csaw": false, "cwe": "CWE-1287", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n(cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143)", "A flaw was found in the Linux kernel's AMD GPU JPEG driver. This vulnerability occurs because the JPEG rings do not support 64-bit user fence writes. An attacker could exploit this by submitting commands with 64-bit user fences, leading to the rejection of command submissions and potentially a denial of service."], "name": "CVE-2026-63848", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63848\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63848\nhttps://lore.kernel.org/linux-cve-announce/2026071930-CVE-2026-63848-7a61@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ac27241106bc946bd50032f4cd96899c6a6fe69,f675801889b265634aefd30aa4503fc2b9e6ce1c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ac27241106bc946bd50032f4cd96899c6a6fe69,2e216c2ff159b2eb1da6e9c716d727efc73c64b5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ac27241106bc946bd50032f4cd96899c6a6fe69,b41248d1c18384835f6532e68592ee07605da283)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ac27241106bc946bd50032f4cd96899c6a6fe69,41c4f3f68a343d62bd352a95ace93a11c4ad92ed)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ac27241106bc946bd50032f4cd96899c6a6fe69,e5f612dc91650561fe2b5b76dd6d2898ec9ad480)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.141,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.91,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.33,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.10,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T02:45:02.818901+00:00", "updated": "2026-07-21T02:45:02.818964+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}