In the Linux AMDGPU driver for gfx9, a BUG_ON macro previously caused the kernel to panic when a specific internal condition was hit. The patch replaces that call with WARN_ON to emit a warning instead of crashing. The vulnerability therefore allowed an attacker that could trigger the offending condition—such as malformed GPU instructions—to force a kernel panic, resulting in a denial‑of‑service. The likely attack vector is exploitation of GPU driver during command submission or driver misuse; this inference is based on the description of the function affected.

The affected product is the Linux kernel’s AMDGPU driver, specifically the gfx9 architecture. Exact affected kernel versions are not listed in the data; however, the fix is present in the commit identified by b71604f8685b0eba07866f4e8dc30f93e1931054, so any kernels before this commit are potentially vulnerable.

No CVSS score and EPSS are unavailable, and the vulnerability is not listed in the CISA KEV catalog, indicating a low to moderate likelihood of exploitation in the wild. The exploit would require injection or manipulation of GPU commands that trigger the WARN_ON condition, a scenario that is not trivial but could be achieved with privileged access or a compromised driver. Absence of public exploits suggests the risk is not yet high, but a kernel panic would still disrupt availability if successfully triggered.