Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings

VCN encoder and decoder rings do not support 64-bit user fence writes,
reject CS submissions with user fences.

(cherry picked from commit e2b5499fca55f1a32960a311bbb62e35891eaf73)
Published: 2026-07-19
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel, the AMDGPU VCN encoder and decoder rings implementation does not support 64‑bit user fence writes. When a command stream includes a 64‑bit user fence, the rings reject the submission, causing the kernel to fail the command stream. This results in failures for GPU media encode/decode workloads. The vulnerability is classified under CWE‑617.

Affected Systems

All Linux kernel versions that include the AMDGPU driver with VCN v2.0 enabled are affected. This includes any distribution that ships a kernel containing the drm/amdgpu/vcn component. The defect is present whenever the VCN v2.0 encoder or decoder rings are active, irrespective of the particular distribution.

Risk and Exploitability

The CVSS base score of 7.8 indicates high severity. The EPSS score is less than 1%, suggesting a low probability of exploitation at the present time. The vulnerability is not listed in the CISA KEV catalog, so no known live exploits are documented. Likely attack vectors are local or privileged; a user with kernel or driver access that can submit GPU command streams may trigger the failure. The flaw does not provide a path to remote code execution or privilege escalation.

Generated by OpenCVE AI on August 3, 2026 at 02:36 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the kernel to a release that includes commit e2b5499fca55f1a32960a311bbb62e35891eaf73 or later.
  • If an upgrade cannot be applied immediately, disable the VCN v2.0 encoder and decoder rings in the AMDGPU driver to prevent use of 64‑bit user fences.
  • Manually apply the fix by cherry‑picking commit e2b5499fca55f1a32960a311bbb62e35891eaf73 into your kernel tree and rebuild the kernel.

Generated by OpenCVE AI on August 3, 2026 at 02:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8574-1 Linux kernel (GCP FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8593-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8574-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8595-1 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-8596-1 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-8595-2 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8603-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-8606-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-8607-1 Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-8608-1 Linux kernel (Azure FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8609-1 Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-8574-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8595-3 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8618-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8619-1 Linux kernel (HWE) vulnerabilities
History

Wed, 29 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665
CWE-668

Wed, 22 Jul 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665
CWE-668

Wed, 22 Jul 2026 00:15:00 +0000


Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Sun, 19 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit e2b5499fca55f1a32960a311bbb62e35891eaf73)
Title drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-05T12:36:34.905Z

Reserved: 2026-07-19T07:54:57.016Z

Link: CVE-2026-63856

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-63856 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T02:45:03Z

Weaknesses