CVE-2026-63852
Received Received - Intake

AMDGPU VCN Encoder Ring User Fence Write Vulnerability

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit ff1a5a125c5a70c328806b9bc01d7d942cf3f9aa)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63852
EUVD
EUVD-2026-45536

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel to 4.0.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects AMD GPU's VCN (Video Core Next) component. It involves a failure to properly handle 64-bit user fence writes in VCN encoder and decoder rings for version 4.0.3. The system now rejects command submissions that include user fences to prevent potential issues.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMDGPU VCN (Video Core Next) driver and does not have direct network detection methods. To check for affected systems, verify the kernel version and AMDGPU driver details. Use commands like 'uname -a' to check the kernel version and 'dmesg | grep amdgpu' to inspect AMDGPU driver logs for errors related to VCN rings.

Impact Analysis

If you use a Linux system with an AMD GPU, this vulnerability could cause instability or crashes when processing video encoding or decoding tasks. Applications relying on GPU acceleration may fail or behave unexpectedly.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a Linux kernel graphics driver issue (amdgpu/vcn) without implications for data protection or privacy.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this vulnerability. The specific commit mentioned is ff1a5a125c5a70c328806b9bc01d7d942cf3f9aa, so ensure your kernel version incorporates this change.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63852. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart