High 7.8Published Jul 19, 2026

CVE-2026-63852drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring

Updated under an hour ago (Oct 28, 2026, 5:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit ff1a5a125c5a70c328806b9bc01d7d942cf3f9aa)

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-20
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b889ef4ac98837838c38f7b9f72bba2f33ee367d before c12a5d35033c0640c57c10d7111c010c7b9c2c8e; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 387b7c7667bd5c53549350ddad866d2fcf75a529; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 9076a83e5adefd10dc5c967c7b8bde601c4c512a; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 0177ac6141c8857130cf365369c74dee7b6b1f7f; from b889ef4ac98837838c38f7b9f72bba2f33ee367d before 4532b52b34e4e4310386e6fdf6a643368599f522	CNA record
linux linux_kernel linux:linux_kernel	from 6.5 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10; 7.1	NVD

References

References

https://git.kernel.org/stable/c/c12a5d35033c0640c57c10d7111c010c7b9c2c8e	patch
https://git.kernel.org/stable/c/387b7c7667bd5c53549350ddad866d2fcf75a529	patch
https://git.kernel.org/stable/c/9076a83e5adefd10dc5c967c7b8bde601c4c512a	patch
https://git.kernel.org/stable/c/0177ac6141c8857130cf365369c74dee7b6b1f7f	patch
https://git.kernel.org/stable/c/4532b52b34e4e4310386e6fdf6a643368599f522	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.