CVE-2026-63849: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vcn: set nouserfence for VCN v5.0.1 enc ring
VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences.
(cherry picked from commit e16be95a2c3ee712b142cb27d2dca0b461181359)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set no_user_fence for the VCN v5.0.1 encoder ring and reject command-submission requests containing user fences, which the VCN encoder and decoder rings do not support.
Linux kernel DRM/amdgpu VCN v5.0.1 encoder ring no_user_fence = true
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63849?
The severity of CVE-2026-63849 is high with a score of 7.8.
How do I fix CVE-2026-63849?
To fix CVE-2026-63849, update your Linux kernel to the patched version that addresses this vulnerability.
What systems are affected by CVE-2026-63849?
CVE-2026-63849 affects Linux systems utilizing the amdgpu driver and VCN v5.0.1 encoding.
What are the potential risks of CVE-2026-63849?
CVE-2026-63849 could lead to denial of service or information disclosure due to improper handling of user fence writes.
Is CVE-2026-63849 a widely exploited vulnerability?
There is currently no public indication that CVE-2026-63849 is being actively exploited in the wild.