Impact
The AMDGPU driver contained a BUG_ON that would trigger a kernel panic if a specific internal condition became true. The recent commit replaced BUG_ON with WARN_ON, allowing the kernel to continue running and merely emitting a warning. Prior to the patch, this coding flaw represented improper failure handling, a CWE-400 type weakness, and could be exploited to forcibly stop the system.
Affected Systems
Linux distributions using a kernel that includes the AMDGPU driver for AMD GPUs built on the gfx12 architecture, before the application of commit f952076f76d62f783e8ba4995a7c400d39354ccf. All impacted hosts, whether running a vendor‑supplied kernel or a custom build, are eligible for the fix.
Risk and Exploitability
Because no CVSS or EPSS score is published and the advisory is not listed in the CISA KEV catalog, the exploitation probability is uncertain. The high impact of a kernel panic makes it a serious issue; the attack vector is inferred to be local or requires kernel‑level privileges, as the vulnerable code runs in driver context. An attacker with sufficient exposure could trigger the condition and cause a denial of service by crashing the kernel, requiring a reboot to recover.
OpenCVE Enrichment