Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()

There's no need to crash the kernel for these cases.

(cherry picked from commit c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5)
Published: 2026-08-10
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A BUG_ON in the AMDGPU SDMA7.1 driver triggered a kernel panic when an unexpected condition was met, resulting in a denial‑of‑service by shutting down the entire system. The patch replaces that BUG_ON with a WARN_ON, so the kernel no longer crashes but logs a warning instead. The core weakness remains a failure‑to‑handle unexpected states (CWE‑617), meaning that the underlying logic issue is still present; repeated warnings could indicate problematic driver behavior but no crash will now occur.

Affected Systems

The issue exists in Linux kernel builds that include the amdgpu driver before the commit c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5. It affects the SDMA7.1 path in amdgpu until the patch is incorporated.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity once the crash mechanism is removed. The EPSS score of less than 1% shows a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. No public remote exploitation is documented at this time.

Generated by OpenCVE AI on August 13, 2026 at 09:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the system to a Linux kernel version that includes commit c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5, ensuring the amdgpu driver uses WARN_ON instead of BUG_ON.
  • If a kernel update is not possible, consider disabling or limiting use of the sdma7.1 path in the amdgpu driver (e.g., by setting amdgpu.SDMA=0 via modprobe options) to reduce the likelihood of hitting the problematic condition.
  • Monitor kernel logs such as dmesg or syslog for WARN_ON messages related to amdgpu and investigate repeated warnings as potential indicators of residual logic issues.

Generated by OpenCVE AI on August 13, 2026 at 09:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 08:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399
CWE-410

Tue, 11 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Mon, 10 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399
CWE-410

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry picked from commit c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5)
Title drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T04:58:58.564Z

Reserved: 2026-07-30T09:28:09.368Z

Link: CVE-2026-68109

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-10T13:19:55.733

Modified: 2026-08-17T05:18:10.353

Link: CVE-2026-68109

cve-icon Redhat

Severity : Low

Publid Date: 2026-08-10T00:00:00Z

Links: CVE-2026-68109 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T10:00:05Z

Weaknesses