Impact
The AMDGPU SDMA 6.0 driver in the Linux kernel contains an assertion that used BUG_ON to trigger a kernel panic when a specific internal condition occurs. This transforms a non‑fatal condition into a fatal one, causing system‑wide shutdowns. The weakness corresponds to improper handling of error conditions (CWE‑617). The exploit does not provide code execution or information disclosure; its impact is loss of availability for the affected system.
Affected Systems
All Linux kernel distributions that incorporated the AMDGPU SDMA 6.0 driver before commit c17a508a7d652da3728f8bbc481bfffe96d65a87 are affected. The fix replaces BUG_ON with WARN_ON to prevent crashes. Exact kernel version ranges are not listed, so any kernel containing the pre‑commit code is vulnerable, while kernels that contain the commit or later are safe.
Risk and Exploitability
The CVSS score is 5.5 and the EPSS score is < 1%, indicating low public visibility. The vulnerability is not listed in KEV. An attacker must have kernel‑level or privileged access to trigger the condition, so the attack vector is inferred to be internal or based on privileged code execution. The risk is a potential denial of service if the fault condition can be reached, but automated exploitation is unlikely due to the lack of external triggers and low exploitation probability.
OpenCVE Enrichment
Debian DLA