The Linux kernel previously contained a defensive assertion using BUG_ON in the AMDGPU driver for the gfx9.4.3 family. When the asserted condition failed, the kernel would immediately crash, potentially disrupting system availability. The fix replaces BUG_ON with WARN_ON, which logs a warning instead of halting execution, thus preventing an unplanned kernel reboot. The primary impact of the original flaw was a denial‑of‑service condition, limiting confidentiality, integrity, and availability only because the system would become inoperative.

The affected component is the Linux kernel’s AMDGPU DRM driver for the gfx9.4.3 hardware family. No specific kernel or driver version range is publicly documented beyond this driver area, and the bug exists under the kernel distribution provided by Linux.

Because the exploit requires an attacker to trigger the specific BUG_ON condition within the AMDGPU driver, the attack surface is limited to environments running the affected driver. The likely attack vector is inferred, as it hinges on sending malicious graphics commands that reach the driver. The EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog, indicating a lower public exploitation probability. The CVSS score of 4.7 indicates moderate severity. Nonetheless, any system using the affected driver that can receive malicious graphics commands could be coerced into a kernel crash, representing a moderate risk until the patch is applied.