{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63852", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.016Z", "datePublished": "2026-07-19T14:04:43.258Z", "dateUpdated": "2026-07-20T13:40:49.533Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:40:49.533Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit ff1a5a125c5a70c328806b9bc01d7d942cf3f9aa)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c"], "versions": [{"version": "b889ef4ac98837838c38f7b9f72bba2f33ee367d", "lessThan": "c12a5d35033c0640c57c10d7111c010c7b9c2c8e", "status": "affected", "versionType": "git"}, {"version": "b889ef4ac98837838c38f7b9f72bba2f33ee367d", "lessThan": "387b7c7667bd5c53549350ddad866d2fcf75a529", "status": "affected", "versionType": "git"}, {"version": "b889ef4ac98837838c38f7b9f72bba2f33ee367d", "lessThan": "9076a83e5adefd10dc5c967c7b8bde601c4c512a", "status": "affected", "versionType": "git"}, {"version": "b889ef4ac98837838c38f7b9f72bba2f33ee367d", "lessThan": "0177ac6141c8857130cf365369c74dee7b6b1f7f", "status": "affected", "versionType": "git"}, {"version": "b889ef4ac98837838c38f7b9f72bba2f33ee367d", "lessThan": "4532b52b34e4e4310386e6fdf6a643368599f522", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c"], "versions": [{"version": "6.5", "status": "affected"}, {"version": "0", "lessThan": "6.5", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.6.141"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c12a5d35033c0640c57c10d7111c010c7b9c2c8e"}, {"url": "https://git.kernel.org/stable/c/387b7c7667bd5c53549350ddad866d2fcf75a529"}, {"url": "https://git.kernel.org/stable/c/9076a83e5adefd10dc5c967c7b8bde601c4c512a"}, {"url": "https://git.kernel.org/stable/c/0177ac6141c8857130cf365369c74dee7b6b1f7f"}, {"url": "https://git.kernel.org/stable/c/4532b52b34e4e4310386e6fdf6a643368599f522"}], "title": "drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring", "id": "2502311", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502311"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1287", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n(cherry picked from commit ff1a5a125c5a70c328806b9bc01d7d942cf3f9aa)", "A flaw was found in the Linux kernel's AMD GPU (Graphics Processing Unit) Video Core Next (VCN) component. This vulnerability arises because the VCN encoder and decoder rings do not properly handle 64-bit user fence writes, leading to the rejection of command submissions that utilize these fences. An attacker could potentially exploit this to cause a denial of service by preventing legitimate operations that rely on 64-bit user fence writes."], "name": "CVE-2026-63852", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63852\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63852\nhttps://lore.kernel.org/linux-cve-announce/2026071931-CVE-2026-63852-cc70@gregkh/T"], "threat_severity": "Moderate"}