CVE-2026-63845 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a)

Is your site exposed to CVE-2026-63845?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/6876d05b899102f4dfdb9ad560132126144c1c72 https://git.kernel.org/stable/c/a676f16ea9a7df96d69f405afb6eb349571b3382 https://git.kernel.org/stable/c/af4b458daa597dae707bf3f1f74745f5fc133ca2 https://git.kernel.org/stable/c/d4e0172a1b614373385e9b7111b580f8d2e0b98f https://git.kernel.org/stable/c/e7e90b5839aeb8805ec83bb4da610b8dab8e184d

Frequently Asked Questions

What is CVE-2026-63845? +

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 8d0cac9478a3f046279c657d6a2545de49ae675a) It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-63845? +

CVE-2026-63845 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0013, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-63845? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-63845