Impact
The AMDGPU SDMA 6.0 driver in the Linux kernel contained a BUG_ON assertion that triggered a kernel panic when a specific internal condition was met. The crash was unconditional, meaning any occurrence of the condition would result in a system‑wide shutdown, removing availability without exposing sensitive data or providing code execution privileges. The underlying weakness is the misuse of an assertion for a non‑fatal condition, effectively turning a graceful error path into a fatal one. Based on the description, it is inferred that this condition can only be triggered by code executing within kernel space, as it involves driver internals, but this inference is not directly stated in the input.
Affected Systems
All Linux kernel distributions that incorporated the AMDGPU SDMA 6.0 driver code before the commit that replaced the BUG_ON with WARN_ON. The fix was introduced in commit c17a508a7d652da3728f8bbc481bfffe96d65a87. Users should verify that their kernel version contains this commit or a newer revision.
Risk and Exploitability
The CVSS score is not publicly listed, and EPSS data is unavailable, indicating low public visibility. The vulnerability does not provide information disclosure or code execution capabilities. It can only be triggered by code executing in kernel mode or by a driver that interacts with the AMDGPU SDMA engine, based on the description but the exact attack vector is not explicitly disclosed. The risk is a potential denial of service if the unfatal condition is reachable in a production environment. The likelihood of automated exploitation is presumed low due to the lack of external trigger vectors and limited visibility.
OpenCVE Enrichment