CVE-2026-63853
HIGH severity · CVSS 7.8 · Improper input validation
7.8CVSS HIGH
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit fd852c048b46f9825e904a4f3f4538fe9d8827d9)
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/1286b6872de0aee1feeeaa6dbac86369806de9a5 ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/1286b6872de0aee1feeeaa6dbac86369806de9a5Patch
- https://git.kernel.org/stable/c/51f694221047c84fa185be98210eb2c354ffb8c6Patch
- https://git.kernel.org/stable/c/525cc9df654365c147ae61e5562cf599ea2257f7Patch
- https://git.kernel.org/stable/c/6bdd2ed6458d35c368fbe9550a4d7f342abd3a92Patch
- https://git.kernel.org/stable/c/d8df8918677136b018d71d0b94a1f6b816715946Patch
- https://git.kernel.org/stable/c/772f83fc70b797ac88d696671780eaf175cc7f31