Impact
The vulnerability stems from a hard assert using BUG_ON in the AMDGPU DRM driver for the gfx10 hardware. The assertion caused the kernel to panic when an unexpected condition was met, leading to an immediate system crash. The fix replaces the BUG_ON with WARN_ON, preventing a kernel panic and instead logging a warning. This change removes the denial‑of‑service potential that the original BUG_ON introduced, as the system can continue to operate after the warning is issued.
Affected Systems
This issue affects the Linux kernel driver for AMD GPUs, specifically the drm/amdgpu/gfx10 code path. No specific kernel version range is listed in the data; the patch appears in the Linux kernel mainline commit history (see commit references). The vendor is the Linux kernel maintainers.
Risk and Exploitability
There is no CVSS score reported, and the EPSS score is not available; the vulnerability is not listed in the CISA KEV catalog. Because the vulnerability is an unhandled assertion that caused a kernel panic, the risk is primarily denial of service and not a direct code‑execution or data‑exposure flaw. The exploitability is low to moderate: an attacker would need to trigger the specific driver path that hits the assert condition, and the amended WARN_ON removes the crash. Without a known exploit, the practical risk is limited but an unpatched kernel could be abused to cause service disruption.
OpenCVE Enrichment