The vulnerability stems from a hard assert using BUG_ON in the AMDGPU DRM driver for the gfx10 hardware. The assertion caused the kernel to panic when an unexpected condition was met, leading to an immediate system crash. The fix replaces the BUG_ON with WARN_ON, preventing a kernel panic and instead logging a warning. This change removes the denial‑of‑service potential that the original BUG_ON introduced, as the system can continue to operate after the warning is issued.

This issue affects the Linux kernel driver for AMD GPUs, specifically the drm/amdgpu/gfx10 code path. No specific kernel version range is listed in the data; the patch appears in the Linux kernel mainline commit history (see commit references). The vendor is the Linux kernel maintainers.

The CVSS score is 4.7, and the EPSS score is less than 1%, indicating a low exploitation probability; the vulnerability is not listed in the CISA KEV catalog. Because the vulnerability is an unhandled assertion that caused a kernel panic, the risk is primarily denial‑of‑service and not a direct code‑execution or data‑exposure flaw. The exploitability is low to moderate: an attacker would need to trigger the specific driver path that hits the assert condition, and the amended WARN_ON removes the crash. Without a known exploit, the practical risk is limited but an unpatched kernel could be abused to cause service disruption.