In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings

VCN encoder and decoder rings do not support 64-bit user fence writes,
reject CS submissions with user fences.

(cherry picked from commit e2b5499fca55f1a32960a311bbb62e35891eaf73)

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0012.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1b61de45dfaff00b627e47349a019658e39268b9 affected < f264019be80de79f84f464846451445923bffea0
1b61de45dfaff00b627e47349a019658e39268b9 affected < 5e777bc4cbe928ac0fd95e368fee1540f2ce4db2
1b61de45dfaff00b627e47349a019658e39268b9 affected < ac06ce5cac9e711281585d09d00c6efcd9b86396
1b61de45dfaff00b627e47349a019658e39268b9 affected < c71aecae98e42dcf2baf462df50b3a2cf1a93fe4
1b61de45dfaff00b627e47349a019658e39268b9 affected < 8d80b293b41fcb5e9396db93e788b0f4ebcbafb7
Linux Linux affected
Version Status Constraints
5.3 affected —
0 unaffected < 5.3
6.6.141 unaffected ≤ 6.6.*
6.12.91 unaffected ≤ 6.12.*
6.18.33 unaffected ≤ 6.18.*
7.0.10 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8574-1 Linux kernel (GCP FIPS) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/5e777bc4cbe928ac0fd95e368fee1540f2ce4db2 cve-icon
https://git.kernel.org/stable/c/8d80b293b41fcb5e9396db93e788b0f4ebcbafb7 cve-icon
https://git.kernel.org/stable/c/ac06ce5cac9e711281585d09d00c6efcd9b86396 cve-icon
https://git.kernel.org/stable/c/c71aecae98e42dcf2baf462df50b3a2cf1a93fe4 cve-icon
https://git.kernel.org/stable/c/f264019be80de79f84f464846451445923bffea0 cve-icon
https://lore.kernel.org/linux-cve-announce/2026071932-CVE-2026-63856-cac0@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-63856 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-63856 cve-icon
History

Wed, 22 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
References

Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Sun, 19 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit e2b5499fca55f1a32960a311bbb62e35891eaf73)
Title drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-20T13:40:53.515Z

Reserved: 2026-07-19T07:54:57.016Z

Link: CVE-2026-63856

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-63856 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-21T03:15:02Z

Weaknesses