Impact
The vulnerability was identified in the Linux kernel AMDGPU driver for the gfx12.1 architecture, where a BUG_ON assertion could trigger a kernel panic when certain conditions were met. The patch changes the code to use WARN_ON, which records a warning instead of terminating the kernel, preventing the crash but still indicating a potentially harmful state. From a security standpoint, this addresses a potential denial‑of‑service condition caused by a kernel‑level fault.
Affected Systems
All Linux installations that ship the AMDGPU driver for the gfx12.1 graphics hardware are impacted. This includes recent distributions that use the default kernel image containing that driver. The vendor impact list notes Linux:Linux for the affected product.
Risk and Exploitability
The EPSS score is not available and the vulnerability is not listed in the CISA KEV database. No CVSS score is provided, but because the flaw involved an unconditional BUG_ON that would bring the system down, the risk level is high for any attacker capable of triggering the check. The mitigation reduces the impact to a warning, but an attacker with sufficient privileges could still exploit the same kernel code path to trigger the problematic condition, potentially leading to a denial‑of‑service if the kernel were re‑patched by a future release. The attack vector is likely local or privilege‑escalation based, as a kernel driver bug typically requires elevated access.
OpenCVE Enrichment