The vulnerability was a kernel bug in the AMD GPU driver (sdma7.1) that triggered a BUG_ON when an unexpected condition was encountered, causing the kernel to panic and crash. The upstream fix replaces the BUG_ON with WARN_ON, turning the fatal failure into a non-crashing warning. This change removes the immediate denial of service that would have been caused by the kernel panic but does not necessarily correct the underlying logic error.

Affected systems are any installations of the Linux kernel that include the amdgpu driver before the commit c4f230b51cf2d3e7e8b1c800331f3dbed2a9e3f5. The exact kernel releases are not listed in the data, so all kernel versions that built with the pre-fix amdgpu (likely 5.x series and later) are potentially vulnerable. The issue originates in the DRM subsystem's AMD GPU driver.

The CVSS, EPSS, and KEV metrics are not provided, and the vulnerability is not listed in CISA’s KEV catalog, indicating no publicly known exploitation. However the kernel panic was a severe denial of service. The patch removes the crash but the warning may still surface. Since there is no evidence of a remote exploit, the risk remains limited to machines that could trigger the condition through driver input, which is typically a local privilege scenario.