In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings

VCN encoder and decoder rings do not support 64-bit user fence writes,
reject CS submissions with user fences.

(cherry picked from commit 663bed3c7b8b9a7624b0d95d300ddae034ad0614)

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00157.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
cf14826cdfb5c9fe10f98210d040b9d7486c381d affected < e74fc9c72c1ba78d0de0b849f5929c3b39a8e20c
cf14826cdfb5c9fe10f98210d040b9d7486c381d affected < 26c4f38529ac78930c9c4713e16ebc5b689bb0a3
cf14826cdfb5c9fe10f98210d040b9d7486c381d affected < 2d6525e7b2504f5bbfe9417cddc1e8da858791dd
cf14826cdfb5c9fe10f98210d040b9d7486c381d affected < b076e45e6f757a2829e80d0144c1b5f201bee5af
cf14826cdfb5c9fe10f98210d040b9d7486c381d affected < f1e5a6660d7cbf006079126d9babbf0ccf538c6b
Linux Linux affected
Version Status Constraints
5.9 affected —
0 unaffected < 5.9
6.6.141 unaffected ≤ 6.6.*
6.12.91 unaffected ≤ 6.12.*
6.18.33 unaffected ≤ 6.18.*
7.0.10 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/26c4f38529ac78930c9c4713e16ebc5b689bb0a3 cve-icon
https://git.kernel.org/stable/c/2d6525e7b2504f5bbfe9417cddc1e8da858791dd cve-icon
https://git.kernel.org/stable/c/b076e45e6f757a2829e80d0144c1b5f201bee5af cve-icon
https://git.kernel.org/stable/c/e74fc9c72c1ba78d0de0b849f5929c3b39a8e20c cve-icon
https://git.kernel.org/stable/c/f1e5a6660d7cbf006079126d9babbf0ccf538c6b cve-icon
https://lore.kernel.org/linux-cve-announce/2026071932-CVE-2026-63854-0287@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-63854 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-63854 cve-icon
History

Tue, 21 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1287
References

Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Sun, 19 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 663bed3c7b8b9a7624b0d95d300ddae034ad0614)
Title drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-20T13:40:51.515Z

Reserved: 2026-07-19T07:54:57.016Z

Link: CVE-2026-63854

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-63854 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-21T08:00:04Z

Weaknesses