Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

There's no need to crash the kernel for these cases.

(cherry picked from commit f952076f76d62f783e8ba4995a7c400d39354ccf)
Published: 2026-08-10
Score: 4.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The AMDGPU driver for the gfx12 architecture contained a BUG_ON that could trigger a kernel panic when an unexpected internal condition arose. The recent kernel commit replaces the BUG_ON with a WARN_ON, allowing the kernel to continue operation while only emitting a warning. This change represents a shift from an unconditional kernel crash to a less severe failure mode; however, the underlying condition that triggers the warning may still lead to instability or loss of services, thus posing a potential denial of service risk to the affected system.

Affected Systems

Linux distributions that ship kernel builds including the AMDGPU driver for AMD GPUs on the gfx12 architecture before the inclusion of commit f952076f76d62f783e8ba4995a7c400d39354ccf. Both vendor-supplied and custom kernel builds that incorporate the affected driver code are impacted.

Risk and Exploitability

The CVSS score of 4.1 and an EPSS score of less than 1% indicate a moderate severity and a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or requires kernel‑level privileges, as the code runs in driver context; an attacker with sufficient access could attempt to induce the warning condition, potentially leading to performance degradation or a crash if further processing follows. The risk is considered low to moderate due to the low exploitation probability, but the impact of a kernel warning remains significant if triggered.

Generated by OpenCVE AI on August 13, 2026 at 10:34 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to a version that includes commit f952076f76d62f783e8ba4995a7c400d39354ccf or later.
  • If a kernel upgrade is not immediately possible, configure the system to log kernel warnings and use tools such as dmesg or journalctl to monitor for WARN_ON messages from the AMDGPU driver.
  • If the warning indicates a problem that cannot be resolved quickly, consider disabling the affected AMDGPU functionality or modules until an official kernel patch is available.

Generated by OpenCVE AI on August 13, 2026 at 10:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4745-1 linux-6.12 security update
History

Thu, 13 Aug 2026 09:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-693

Wed, 12 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
References
Metrics threat_severity

None

cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Mon, 10 Aug 2026 22:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-693

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry picked from commit f952076f76d62f783e8ba4995a7c400d39354ccf)
Title drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-18T06:55:38.263Z

Reserved: 2026-07-30T09:28:09.369Z

Link: CVE-2026-68113

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-10T13:19:56.230

Modified: 2026-08-18T07:16:50.180

Link: CVE-2026-68113

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-10T11:58:31Z

Links: CVE-2026-68113 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T10:45:04Z

Weaknesses