{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63847", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.016Z", "datePublished": "2026-07-19T14:04:40.248Z", "dateUpdated": "2026-07-20T13:40:44.592Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:40:44.592Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring\n\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n\n(cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v2_5.c"], "versions": [{"version": "14f43e8f88c57bbeaed3d05f13efab733f5e2338", "lessThan": "63691e396105611173072ad548fc2b68831ecf23", "status": "affected", "versionType": "git"}, {"version": "14f43e8f88c57bbeaed3d05f13efab733f5e2338", "lessThan": "4d96e3cbfc66e4d66ea0096bde858e28ab62da00", "status": "affected", "versionType": "git"}, {"version": "14f43e8f88c57bbeaed3d05f13efab733f5e2338", "lessThan": "3a96fee676fc0caf08f03ad915bec6fcd144d551", "status": "affected", "versionType": "git"}, {"version": "14f43e8f88c57bbeaed3d05f13efab733f5e2338", "lessThan": "694fe016969c5e5a24b9e0ef7c1307eedec8ddf8", "status": "affected", "versionType": "git"}, {"version": "14f43e8f88c57bbeaed3d05f13efab733f5e2338", "lessThan": "79405e774ede411c6b47ed41c651e40b92de64a2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/jpeg_v2_5.c"], "versions": [{"version": "5.6", "status": "affected"}, {"version": "0", "lessThan": "5.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.6.141"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/63691e396105611173072ad548fc2b68831ecf23"}, {"url": "https://git.kernel.org/stable/c/4d96e3cbfc66e4d66ea0096bde858e28ab62da00"}, {"url": "https://git.kernel.org/stable/c/3a96fee676fc0caf08f03ad915bec6fcd144d551"}, {"url": "https://git.kernel.org/stable/c/694fe016969c5e5a24b9e0ef7c1307eedec8ddf8"}, {"url": "https://git.kernel.org/stable/c/79405e774ede411c6b47ed41c651e40b92de64a2"}], "title": "drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring", "id": "2502275", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502275"}, "csaw": false, "cwe": "CWE-1287", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring\nJPEG rings do not support 64-bit user fence writes, reject CS\nsubmissions with user fences.\n(cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587)", "A flaw was found in the Linux kernel's AMD GPU JPEG driver. This issue occurs because the JPEG hardware component does not properly handle certain types of graphics commands, specifically 64-bit user fence writes. An attacker could craft and submit malicious commands, causing the system to reject these submissions. This could lead to a denial of service, making the graphics functionality unavailable."], "name": "CVE-2026-63847", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63847\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63847\nhttps://lore.kernel.org/linux-cve-announce/2026071930-CVE-2026-63847-2fb3@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[14f43e8f88c57bbeaed3d05f13efab733f5e2338,63691e396105611173072ad548fc2b68831ecf23)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[14f43e8f88c57bbeaed3d05f13efab733f5e2338,4d96e3cbfc66e4d66ea0096bde858e28ab62da00)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[14f43e8f88c57bbeaed3d05f13efab733f5e2338,3a96fee676fc0caf08f03ad915bec6fcd144d551)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[14f43e8f88c57bbeaed3d05f13efab733f5e2338,694fe016969c5e5a24b9e0ef7c1307eedec8ddf8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[14f43e8f88c57bbeaed3d05f13efab733f5e2338,79405e774ede411c6b47ed41c651e40b92de64a2)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.141,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.91,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.33,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.10,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T02:45:02.819303+00:00", "updated": "2026-07-21T02:45:02.819341+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}