In the Linux AMDGPU driver for gfx9, a BUG_ON macro previously caused the kernel to panic when a specific internal condition was hit. The patch replaces that call with WARN_ON to emit a warning instead of crashing. The vulnerability therefore allowed an attacker that could trigger the offending condition—such as malformed GPU instructions—to force a kernel panic, resulting in a denial‑of‑service. The likely attack vector is exploitation of GPU driver during command submission or driver misuse; this inference is based on the description of the function affected.

The affected product is the Linux kernel’s AMDGPU driver, specifically the gfx9 architecture. Exact affected kernel versions are not listed in the data; however, the fix is present in the commit identified by b71604f8685b0eba07866f4e8dc30f93e1931054, so any kernels before this commit are potentially vulnerable.

The CVSS score is 4.7, indicating a low severity vulnerability. The EPSS score is less than 1%, suggesting that the likelihood of exploitation in the wild is very low. The vulnerability is not listed in the CISA KEV catalog. Exploitation would still require an attacker to trigger the WARN_ON condition, likely through malformed GPU commands or malicious driver activity. While no public exploits are known, a successful trigger would cause a kernel panic, resulting in a denial‑of‑service.