Impact
The AMDGPU driver for the gfx12 architecture contained a BUG_ON that could trigger a kernel panic when an unexpected internal condition arose. The recent kernel commit replaces the BUG_ON with a WARN_ON, allowing the kernel to continue operation while only emitting a warning. This change represents a shift from an unconditional kernel crash to a less severe failure mode; however, the underlying condition that triggers the warning may still lead to instability or loss of services, thus posing a potential denial of service risk to the affected system.
Affected Systems
Linux distributions that ship kernel builds including the AMDGPU driver for AMD GPUs on the gfx12 architecture before the inclusion of commit f952076f76d62f783e8ba4995a7c400d39354ccf. Both vendor-supplied and custom kernel builds that incorporate the affected driver code are impacted.
Risk and Exploitability
The CVSS score of 4.1 and an EPSS score of less than 1% indicate a moderate severity and a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or requires kernel‑level privileges, as the code runs in driver context; an attacker with sufficient access could attempt to induce the warning condition, potentially leading to performance degradation or a crash if further processing follows. The risk is considered low to moderate due to the low exploitation probability, but the impact of a kernel warning remains significant if triggered.
OpenCVE Enrichment
Debian DLA