{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63845", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.016Z", "datePublished": "2026-07-19T14:04:39.084Z", "dateUpdated": "2026-07-20T13:40:42.584Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:40:42.584Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v4_0.c"], "versions": [{"version": "b13111de32a9202c6d58bb7e4c06296b99c4d7e3", "lessThan": "d4e0172a1b614373385e9b7111b580f8d2e0b98f", "status": "affected", "versionType": "git"}, {"version": "b13111de32a9202c6d58bb7e4c06296b99c4d7e3", "lessThan": "a676f16ea9a7df96d69f405afb6eb349571b3382", "status": "affected", "versionType": "git"}, {"version": "b13111de32a9202c6d58bb7e4c06296b99c4d7e3", "lessThan": "6876d05b899102f4dfdb9ad560132126144c1c72", "status": "affected", "versionType": "git"}, {"version": "b13111de32a9202c6d58bb7e4c06296b99c4d7e3", "lessThan": "af4b458daa597dae707bf3f1f74745f5fc133ca2", "status": "affected", "versionType": "git"}, {"version": "b13111de32a9202c6d58bb7e4c06296b99c4d7e3", "lessThan": "e7e90b5839aeb8805ec83bb4da610b8dab8e184d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v4_0.c"], "versions": [{"version": "5.19", "status": "affected"}, {"version": "0", "lessThan": "5.19", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.6.141"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/d4e0172a1b614373385e9b7111b580f8d2e0b98f"}, {"url": "https://git.kernel.org/stable/c/a676f16ea9a7df96d69f405afb6eb349571b3382"}, {"url": "https://git.kernel.org/stable/c/6876d05b899102f4dfdb9ad560132126144c1c72"}, {"url": "https://git.kernel.org/stable/c/af4b458daa597dae707bf3f1f74745f5fc133ca2"}, {"url": "https://git.kernel.org/stable/c/e7e90b5839aeb8805ec83bb4da610b8dab8e184d"}], "title": "drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring", "id": "2502292", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502292"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1287", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n(cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a)", "A flaw was found in the Linux kernel, specifically within the AMD GPU's JPEG (Joint Photographic Experts Group) ring component. This vulnerability occurs because the JPEG v4.0 rings do not support 64-bit user fence writes. This can lead to the system rejecting command submissions that utilize user fences, potentially causing a denial of service for applications relying on this functionality."], "name": "CVE-2026-63845", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63845\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63845\nhttps://lore.kernel.org/linux-cve-announce/2026071930-CVE-2026-63845-59b7@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b13111de32a9202c6d58bb7e4c06296b99c4d7e3,d4e0172a1b614373385e9b7111b580f8d2e0b98f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b13111de32a9202c6d58bb7e4c06296b99c4d7e3,a676f16ea9a7df96d69f405afb6eb349571b3382)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b13111de32a9202c6d58bb7e4c06296b99c4d7e3,6876d05b899102f4dfdb9ad560132126144c1c72)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b13111de32a9202c6d58bb7e4c06296b99c4d7e3,af4b458daa597dae707bf3f1f74745f5fc133ca2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b13111de32a9202c6d58bb7e4c06296b99c4d7e3,e7e90b5839aeb8805ec83bb4da610b8dab8e184d)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.141,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.91,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.33,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0.10,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T02:30:17.331051+00:00", "updated": "2026-07-21T02:30:17.331122+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}