Review reviewHigh

CVE-2026-63851

Linux

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 084d94ac93707bdda07efb5cee786f632de4219b)

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2026.07.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 547aad32edac17a3ec4989d8aad2426d0cbeb590 < 75091030f07b7957cc0646cd52e2d9d15f611483, >= 547aad32edac17a3ec4989d8aad2426d0cbeb590 < 6d9a98c5ed65ba92a09e4ca5a5f6941448145529, >= 547aad32edac17a3ec4989d8aad2426d0cbeb590 < 7f23b5c420b9f68a210c29c5123bace670aa8cc9, >= 547aad32edac17a3ec4989d8aad2426d0cbeb590 < 589a254bf3e88204c8402b9cbccd5e23a0af990f, >= 6.7
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: Not available