CVE-2026-63852drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit ff1a5a125c5a70c328806b9bc01d7d942cf3f9aa)
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b889ef4ac98837838c38f7b9f72bba2f33ee367d before c12a5d35033c0640c57c10d7111c010c7b9c2c8e; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 387b7c7667bd5c53549350ddad866d2fcf75a529; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 9076a83e5adefd10dc5c967c7b8bde601c4c512a; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 0177ac6141c8857130cf365369c74dee7b6b1f7f; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 4532b52b34e4e4310386e6fdf6a643368599f522 | CNA record |
References
- https://git.kernel.org/stable/c/c12a5d35033c0640c57c10d7111c010c7b9c2c8e
- https://git.kernel.org/stable/c/387b7c7667bd5c53549350ddad866d2fcf75a529
- https://git.kernel.org/stable/c/9076a83e5adefd10dc5c967c7b8bde601c4c512a
- https://git.kernel.org/stable/c/0177ac6141c8857130cf365369c74dee7b6b1f7f
- https://git.kernel.org/stable/c/4532b52b34e4e4310386e6fdf6a643368599f522
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.