The AMDGPU driver’s SDMA 5.2 subsystem contained a BUG_ON assertion that would trigger a kernel panic when an unexpected condition arose. The patch replaces this hard assertion with a WARN_ON, allowing the kernel to continue operation while logging a warning. This change removes a potential local denial‑of‑service vector that could bring the whole system down. The weakness is described by CWE‑617.

Linux kernels that include the AMDGPU driver SDMA 5.2 path before the commit that replaces BUG_ON with WARN_ON are impacted. All distributions running a kernel version lacking this change may execute the vulnerable code when the SDMA subsystem encounters the failure condition. The issue is limited to the AMDGPU SDMA code and does not affect other kernel subsystems.

The CVSS score of 4.7 and an EPSS score of less than 1 % indicate low‑to‑moderate risk. It is not listed in CISA’s KEV catalog. The likely attack vector is local, as exploitation would require triggering the SDMA path within the kernel. Based on the description, it is inferred that a user with sufficient privilege to interact with the AMDGPU driver could potentially trigger the condition, but no remote exploitation path is documented. After applying the patch, the risk of a kernel crash is eliminated, leaving only a very low residual risk tied to anomalous warning logs.