Bug 2502311 (CVE-2026-63852)
| Summary: | CVE-2026-63852 kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the Linux kernel's AMD GPU (Graphics Processing Unit) Video Core Next (VCN) component. This vulnerability arises because the VCN encoder and decoder rings do not properly handle 64-bit user fence writes, leading to the rejection of command submissions that utilize these fences. An attacker could potentially exploit this to cause a denial of service by preventing legitimate operations that rely on 64-bit user fence writes.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-07-19 15:03:14 UTC
|