CVE-2026-63844

A flaw was found in the drm/amdgpu/jpeg module of the Linux kernel. A local user could trigger a Denial of Service (DoS) by submitting commands with 64-bit user fences to the JPEG rings, which do not support such operations. This could lead to system instability or a crash. The vulnerability has been resolved by rejecting these unsupported submissions.

This vulnerability is evaluated as a Low severity issue because exploitation requires local authenticated access and is strictly limited to systems equipped with specific AMD GPU hardware running the amdgpu driver. An attacker would need direct access to submit command streams to Direct Rendering Manager (DRM) interfaces to cause a denial of service. Deployments without compatible AMD graphic hardware or where access to DRM render nodes is restricted are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.