CVE-2026-63850: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vcn: set nouserfence for VCN v5.0.0 enc ring
VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences.
(cherry picked from commit 49b1fbbb5a071197ee71e2d70959b1cb29bdc317)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set no_user_fence for the VCN v5.0.0 encoder ring and reject command-stream submissions with user fences.
VCN v5.0.0 encoder ring no_user_fence = true
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63850?
The severity of CVE-2026-63850 is high, with a score of 7.8.
How do I fix CVE-2026-63850?
To fix CVE-2026-63850, update the Linux kernel to a version that addresses this vulnerability.
What software is affected by CVE-2026-63850?
CVE-2026-63850 affects the Linux kernel, specifically the drm/amdgpu component.
What are the potential impacts of CVE-2026-63850?
The potential impacts of CVE-2026-63850 include denial of service and elevated privileges through improper handling of user fence writes.
When was CVE-2026-63850 published?
CVE-2026-63850 was published on July 19, 2026.