The Linux kernel’s AMDGPU driver for gfx12.1 originally included an unconditional BUG_ON assertion that could trigger a kernel panic if a specific, undocumented condition is met. In the release that contains this CVE, that BUG_ON has been replaced by WARN_ON, turning the potential crash into a warning. The updated code eliminates the denial‑of‑service risk of a kernel panic while still alerting observers to an abnormal state.

All Linux systems that ship the AMDGPU driver for AMD gfx12.1 GPUs and include the kernel image affected are impacted. This includes at least any distribution using the default kernel binaries that contain that driver version, as noted by the CNA vendor list of Linux:Linux.

The CVSS score of 4.7 indicates moderate severity and the EPSS < 1% suggests a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local with privilege escalation, as the condition that would trigger the original BUG_ON would likely require manipulation of the driver from a privileged or kernel‑level context. With the patch converting to a WARN_ON, the system no longer crashes; however the warning may still signal an unstable state that could be leveraged in a chain of exploits if exploited locally. This inference is based on limited information and is not explicitly stated in the description.