Impact
The Linux kernel previously contained a defensive assertion using BUG_ON in the AMDGPU driver for the gfx9.4.3 family. When the asserted condition failed, the kernel would immediately crash, potentially disrupting system availability. The fix replaces BUG_ON with WARN_ON, which logs a warning instead of halting execution, thus preventing an unplanned kernel reboot. The primary impact of the original flaw was a denial‑of‑service condition, limiting confidentiality, integrity, and availability only because the system would become inoperative.
Affected Systems
The affected component is the Linux kernel’s AMDGPU DRM driver for the gfx9.4.3 hardware family. No specific kernel or driver version range is publicly documented beyond this driver area, and the bug exists under the kernel distribution provided by Linux.
Risk and Exploitability
Because the exploit requires an attacker to trigger the specific BUG_ON condition within the AMDGPU driver, the attack surface is limited to environments running the affected driver. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating a lower public exploitation probability. Nonetheless, any system using the affected driver that can receive malicious graphics commands could be coerced into a kernel crash, representing a moderate risk until the patch is applied.
OpenCVE Enrichment