The AMD GPU SDMA 5.0 driver in the Linux kernel originally used a BUG_ON assertion that would cause a kernel panic when an unexpected internal condition occurred. The patch replaced BUG_ON with WARN_ON, so instead of crashing, the kernel will log a warning and continue running. Thus the direct denial‑of‑service path that resulted in a crash has been removed, but the warning can still indicate abnormal GPU behavior.

Any machine running a Linux kernel that includes the AMD GPU SDMA 5.0 driver compiled from source before the commit that substituted WARN_ON for BUG_ON is affected. No specific kernel version numbers are listed, so any prior version that has not yet incorporated the change is considered vulnerable.

The CVSS score of 4.7 denotes moderate severity, while the EPSS score of <1% shows a very low likelihood of exploitation. Because the kernel no longer panics on the condition, a remote attacker cannot trigger a denial‑of‑service via this vector. The only exposure left is internal anomalous GPU conditions that will generate WARN_ON messages; there is no known public exploitation activity and it is not in the CISA KEV catalog.