CVE-2026-63847 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587)

Is your site exposed to CVE-2026-63847?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/3a96fee676fc0caf08f03ad915bec6fcd144d551 https://git.kernel.org/stable/c/4d96e3cbfc66e4d66ea0096bde858e28ab62da00 https://git.kernel.org/stable/c/63691e396105611173072ad548fc2b68831ecf23 https://git.kernel.org/stable/c/694fe016969c5e5a24b9e0ef7c1307eedec8ddf8 https://git.kernel.org/stable/c/79405e774ede411c6b47ed41c651e40b92de64a2

Frequently Asked Questions

What is CVE-2026-63847? +

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587) It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-63847? +

CVE-2026-63847 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0013, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-63847? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-63847