{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63850", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.016Z", "datePublished": "2026-07-19T14:04:41.975Z", "dateUpdated": "2026-07-20T13:40:47.581Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:40:47.581Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring\n\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n\n(cherry picked from commit 49b1fbbb5a071197ee71e2d70959b1cb29bdc317)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v5_0_0.c"], "versions": [{"version": "b6d1a06320519ac3bfda6ce81067a1bc409b9cff", "lessThan": "9f5a1459ecc3195282be617639d710b54779c9dc", "status": "affected", "versionType": "git"}, {"version": "b6d1a06320519ac3bfda6ce81067a1bc409b9cff", "lessThan": "139a8a52ef4349c62129703b3a3e3a6ae4d634eb", "status": "affected", "versionType": "git"}, {"version": "b6d1a06320519ac3bfda6ce81067a1bc409b9cff", "lessThan": "2c350f3cd94be847ac216e1358ec7001eaaf0934", "status": "affected", "versionType": "git"}, {"version": "b6d1a06320519ac3bfda6ce81067a1bc409b9cff", "lessThan": "8cae0ce77de492d7c31c1532a2e80c0c6e7e58cb", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v5_0_0.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.12.91"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.18.33"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.0.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/9f5a1459ecc3195282be617639d710b54779c9dc"}, {"url": "https://git.kernel.org/stable/c/139a8a52ef4349c62129703b3a3e3a6ae4d634eb"}, {"url": "https://git.kernel.org/stable/c/2c350f3cd94be847ac216e1358ec7001eaaf0934"}, {"url": "https://git.kernel.org/stable/c/8cae0ce77de492d7c31c1532a2e80c0c6e7e58cb"}], "title": "drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring", "id": "2502296", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502296"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1287", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring\nVCN encoder and decoder rings do not support 64-bit user fence writes,\nreject CS submissions with user fences.\n(cherry picked from commit 49b1fbbb5a071197ee71e2d70959b1cb29bdc317)", "A flaw was found in the Linux kernel's AMDGPU Video Core Next (VCN) component. The VCN encoder and decoder rings, specifically version 5.0.0, do not correctly support 64-bit user fence writes. This can lead to a denial of service, as the kernel will reject command submissions that attempt to use these unsupported user fences, preventing affected applications from utilizing the VCN functionality as intended."], "name": "CVE-2026-63850", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63850\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63850\nhttps://lore.kernel.org/linux-cve-announce/2026071931-CVE-2026-63850-bc64@gregkh/T"], "threat_severity": "Moderate"}

{}