CVE-2026-68110 - Vulnerability Details

- drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()

There's no need to crash the kernel for these cases.

(cherry picked from commit fa4f86a148271e325e95287630a3a15a9cd35fdc)

Published: 2026-08-10

Score: 4.7 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability involved a BUG_ON assertion in the amdgpu SDMA component of the Linux kernel. When a specific condition occurred, the assertion caused the kernel to panic, resulting in a system crash. The identified fix replaced the BUG_ON with WARN_ON, turning the hard crash into a warning and allowing the system to continue running. The primary impact was a denial of service through kernel panic.

Affected Systems

The issue affects Linux kernels that incorporate the amdgpu SDMA 4.4.2 module. No specific version range is listed; any kernel build that contains the faulty BUG_ON path before the commit that replaced it is considered affected. The patch is integrated into recent kernel releases following the referenced commit.

Risk and Exploitability

The EPSS score is <1%, indicating a very low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 4.7 categorizes the issue as medium severity, suggesting moderate risk for local users capable of triggering the condition.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`7138fc88fdc1f999a547657af8623d3a2a862fc1`	affected	< 256d6f4803a93df96579c1ffdcb56518b9304f76
`7138fc88fdc1f999a547657af8623d3a2a862fc1`	affected	< ca50e541191fab519ed628182e1472e21d60e2ce
`7138fc88fdc1f999a547657af8623d3a2a862fc1`	affected	< dc3f5da1ba8e280d31676ce15b937e4302235b03
`7138fc88fdc1f999a547657af8623d3a2a862fc1`	affected	< cbe3b293d0ee926e595f53513d7c027d1c3e5be5
`7138fc88fdc1f999a547657af8623d3a2a862fc1`	affected	< 40cdbe9fa424cc6264a7aed93a04bd7d69109d9e

Linux

affected

Version	Status	Constraints
`6.4`	affected	—
`0`	unaffected	< 6.4
`6.6.148`	unaffected	≤ 6.6.*
`6.12.101`	unaffected	≤ 6.12.*
`6.18.42`	unaffected	≤ 6.18.*
`7.1.6`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,256d6f4803a93df96579c1ffdcb56518b9304f76)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ca50e541191fab519ed628182e1472e21d60e2ce)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,dc3f5da1ba8e280d31676ce15b937e4302235b03)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,cbe3b293d0ee926e595f53513d7c027d1c3e5be5)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,40cdbe9fa424cc6264a7aed93a04bd7d69109d9e)`	affected	code_commit	—
`[0,6.6.148)`	affected	semver	—
`[0,6.12.101)`	affected	semver	—
`[0,6.18.42)`	affected	semver	—
`[0,7.1.6)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[6.6.148,6.7.0)`	unaffected	semver	—
`[6.12.101,6.13.0)`	unaffected	semver	—
`[6.18.42,6.19.0)`	unaffected	semver	—
`[7.1.6,7.2.0)`	unaffected	semver	—
`[7.2-rc2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade the Linux kernel to a release that includes the commit replacing BUG_ON with WARN_ON in the amdgpu SDMA component.
If applying a custom kernel build, audit the amdgpu source code to confirm that no remaining BUG_ON statements exist in the SDMA path.
As a temporary measure, disable SDMA support by adjusting the driver configuration or recompiling the driver without the SDMA component until a full kernel update can be applied.

Generated by OpenCVE AI on August 13, 2026 at 10:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4745-1	linux-6.12 security update

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00168.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/256d6f4803a93df96579c1ffdcb56518b9304f76
https://git.kernel.org/stable/c/40cdbe9fa424cc6264a7aed93a04bd7d69109d9e
https://git.kernel.org/stable/c/ca50e541191fab519ed628182e1472e21d60e2ce
https://git.kernel.org/stable/c/cbe3b293d0ee926e595f53513d7c027d1c3e5be5
https://git.kernel.org/stable/c/dc3f5da1ba8e280d31676ce15b937e4302235b03
https://nvd.nist.gov/vuln/detail/CVE-2026-68110
https://www.cve.org/CVERecord?id=CVE-2026-68110

History

Thu, 13 Aug 2026 09:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-20

Wed, 12 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-617
References		https://nvd.nist.gov/vuln/detail/CVE-2026-68110 https://www.cve.org/CVERecord?id=CVE-2026-68110
Metrics	threat_severity `None`	cvssV3_1 `{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Mon, 10 Aug 2026 19:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-20

Mon, 10 Aug 2026 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry picked from commit fa4f86a148271e325e95287630a3a15a9cd35fdc)
Title		drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/256d6f4803a93df96579c1ffdcb56518b9304f76 https://git.kernel.org/stable/c/40cdbe9fa424cc6264a7aed93a04bd7d69109d9e https://git.kernel.org/stable/c/ca50e541191fab519ed628182e1472e21d60e2ce https://git.kernel.org/stable/c/cbe3b293d0ee926e595f53513d7c027d1c3e5be5 https://git.kernel.org/stable/c/dc3f5da1ba8e280d31676ce15b937e4302235b03

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-10T11:58:27.478Z

Updated: 2026-08-17T04:58:59.664Z

Reserved: 2026-07-30T09:28:09.368Z

Link: CVE-2026-68110

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-10T13:19:55.853

Modified: 2026-08-17T05:18:10.443

Link: CVE-2026-68110

Redhat

Severity : Moderate

Publid Date: 2026-08-10T11:58:27Z

Links: CVE-2026-68110 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-13T10:45:04Z

Weaknesses

CWE-617
Reachable Assertion

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object