Impact
The vulnerability involved a BUG_ON assertion in the amdgpu SDMA component of the Linux kernel. When a specific condition occurred, the assertion caused the kernel to panic, resulting in a system crash. The identified fix replaced the BUG_ON with WARN_ON, turning the hard crash into a warning and allowing the system to continue running. The primary impact was a denial of service through kernel panic.
Affected Systems
The issue affects Linux kernels that incorporate the amdgpu SDMA 4.4.2 module. No specific version range is listed; any kernel build that contains the faulty BUG_ON path before the commit that replaced it is considered affected. The patch is integrated into recent kernel releases following the referenced commit.
Risk and Exploitability
No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, suggesting a low likelihood of widespread exploitation. The CVSS score is not provided, but the nature of the flaw indicates a moderate risk for local users capable of triggering the condition. The recommended mitigation is to update the kernel to include the commit that replaces BUG_ON with WARN_ON, which removes the crash trigger.
OpenCVE Enrichment