Skip to main content

Linux CVE-2026-63853

| EUVDEUVD-2026-45537 HIGH
Improper Input Validation (CWE-20)
2026-07-19 Linux GHSA-9vxm-g52p-rp85
Information Disclosure Linux
High
Disputed · 7.8 Vendor: Linux
View

Vulnerability Assessment

Weakness
CWE
CWE-20
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jul 20, 2026

Local privilege/impact flaw in the Linux kernel's amdgpu AMD GPU driver (VCN v4.0 video encode/decode rings) allowed userspace command submissions (CS) to include 64-bit user fences that the encoder/decoder ring hardware cannot correctly service. Before the fix, the driver accepted these submissions instead of rejecting them, so a local user with GPU render-node access could trigger unsupported fence writes with High confidentiality, integrity, and availability impact (CVSS 7.8). This is a fixed upstream stable-kernel issue tagged Information Disclosure; there is no public exploit identified at time of analysis and EPSS exploitation probability is very low (0.15%).

Affected VersionsENISA

Linux patch: 0
Linux 8da1170a16e4d4b49fa07d1f75ad480847ff7eca <1286b6872de0aee1feeeaa6dbac86369806de9a5
Linux patch: 7.0.10
Linux 5.19
Linux patch: 7.1
Linux patch: 6.18.33
Linux 8da1170a16e4d4b49fa07d1f75ad480847ff7eca <6bdd2ed6458d35c368fbe9550a4d7f342abd3a92
Linux 8da1170a16e4d4b49fa07d1f75ad480847ff7eca <51f694221047c84fa185be98210eb2c354ffb8c6

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Sources disagree (Low–High)
Vendor (Linux) PRIMARY 7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SUSE 5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Red Hat 5.5 LOW

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
CVSS changed
Jul 20, 2026 - 15:22 NVD
7.8 (HIGH)
Patch available
Jul 19, 2026 - 16:19 EUVD
CVE Published
Jul 19, 2026 - 14:04 cve.org
HIGH 7.8
CVE Published
Jul 19, 2026 - 14:04 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring

VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences.

(cherry picked from commit fd852c048b46f9825e904a4f3f4538fe9d8827d9)

Executive ViewAI

Why It Matters

A privilege escalation vulnerability in the Linux kernel's AMD GPU driver (CVE-2026-63853) allows local users with GPU access to escalate privileges through malformed video encoding commands. Organizations with AMD GPU deployments in multi-user or untrusted environments face potential compromise of system resources and confidentiality if running unpatched kernel versions.

Recommended Action

Within 24 hours, identify all systems running the Linux kernel with amdgpu driver support and determine which versions lack the vendor-released patch for this issue. Within 7 days, apply the vendor-released kernel patch to all affected systems and validate the update in a staging environment before production deployment. Within 30 days, confirm patch deployment across all production systems and review GPU render-node access controls to restrict privileges to trusted users only.

Business Impact: High
Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score
0.2%
Top 95% exploitable
Data Quality
5 sources
Confidence: Medium
EUVD NVD CVE.org EPSS MSRC Vendor VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.2%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact
High

Priority Score

39
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +39
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0 Not-Affected

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-63853 ADVISORY https://seclists.org/oss-sec/2026/q3/230 ADVISORY https://ubuntu.com/security/notices/USN-8593-1 ADVISORY https://vuldb.com/vuln/380170 REF https://git.kernel.org/stable/c/1286b6872de0aee1feeeaa6dbac86369806de9a5 REF https://git.kernel.org/stable/c/51f694221047c84fa185be98210eb2c354ffb8c6 REF https://git.kernel.org/stable/c/525cc9df654365c147ae61e5562cf599ea2257f7 REF https://git.kernel.org/stable/c/6bdd2ed6458d35c368fbe9550a4d7f342abd3a92 REF https://git.kernel.org/stable/c/772f83fc70b797ac88d696671780eaf175cc7f31 REF https://git.kernel.org/stable/c/d8df8918677136b018d71d0b94a1f6b816715946

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy