High 7.8Published Jul 19, 2026

CVE-2026-63851drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring

Updated under an hour ago (Oct 28, 2026, 11:20 PM ET)

This data is behind schedule: last updated Oct 28, 2026, 9:23 PM ET. We are working on it.Behind: National Vulnerability Database (CVE API 2.0, CPE API 2.0).

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 084d94ac93707bdda07efb5cee786f632de4219b)

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-20
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 547aad32edac17a3ec4989d8aad2426d0cbeb590 before 75091030f07b7957cc0646cd52e2d9d15f611483; 547aad32edac17a3ec4989d8aad2426d0cbeb590 builds before 6d9a98c5ed65ba92a09e4ca5a5f6941448145529; 547aad32edac17a3ec4989d8aad2426d0cbeb590 builds before 7f23b5c420b9f68a210c29c5123bace670aa8cc9; from 547aad32edac17a3ec4989d8aad2426d0cbeb590 before 589a254bf3e88204c8402b9cbccd5e23a0af990f	CNA record
linux linux_kernel linux:linux_kernel	from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10; 7.1	NVD

References

References

https://git.kernel.org/stable/c/75091030f07b7957cc0646cd52e2d9d15f611483	patch
https://git.kernel.org/stable/c/6d9a98c5ed65ba92a09e4ca5a5f6941448145529	patch
https://git.kernel.org/stable/c/7f23b5c420b9f68a210c29c5123bace670aa8cc9	patch
https://git.kernel.org/stable/c/589a254bf3e88204c8402b9cbccd5e23a0af990f	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.