Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()

There's no need to crash the kernel for these cases.

(cherry picked from commit c17a508a7d652da3728f8bbc481bfffe96d65a87)
Published: 2026-08-10
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The AMDGPU SDMA 6.0 driver in the Linux kernel contained a BUG_ON assertion that triggered a kernel panic when a specific internal condition was met. The crash was unconditional, meaning any occurrence of the condition would result in a system‑wide shutdown, removing availability without exposing sensitive data or providing code execution privileges. The underlying weakness is the misuse of an assertion for a non‑fatal condition, effectively turning a graceful error path into a fatal one. Based on the description, it is inferred that this condition can only be triggered by code executing within kernel space, as it involves driver internals, but this inference is not directly stated in the input.

Affected Systems

All Linux kernel distributions that incorporated the AMDGPU SDMA 6.0 driver code before the commit that replaced the BUG_ON with WARN_ON. The fix was introduced in commit c17a508a7d652da3728f8bbc481bfffe96d65a87. Users should verify that their kernel version contains this commit or a newer revision.

Risk and Exploitability

The CVSS score is not publicly listed, and EPSS data is unavailable, indicating low public visibility. The vulnerability does not provide information disclosure or code execution capabilities. It can only be triggered by code executing in kernel mode or by a driver that interacts with the AMDGPU SDMA engine, based on the description but the exact attack vector is not explicitly disclosed. The risk is a potential denial of service if the unfatal condition is reachable in a production environment. The likelihood of automated exploitation is presumed low due to the lack of external trigger vectors and limited visibility.

Generated by OpenCVE AI on August 10, 2026 at 18:22 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to a version that includes commit c17a508a7d652da3728f8bbc481bfffe96d65a87, which replaces the BUG_ON with a WARN_ON to prevent crashes.
  • If an immediate kernel upgrade is not possible, consider disabling or limiting the use of the AMDGPU SDMA 6.0 driver in scenarios where the condition could be triggered, such as by disabling the module at boot or through system configuration.
  • If disabling the driver is impractical, apply a local code patch that modifies the assertion to WARN_ON, mirroring the upstream change, and rebuild the kernel or specific module.

Generated by OpenCVE AI on August 10, 2026 at 18:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 10 Aug 2026 18:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-665

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry picked from commit c17a508a7d652da3728f8bbc481bfffe96d65a87)
Title drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:01:17.402Z

Reserved: 2026-07-30T09:28:09.377Z

Link: CVE-2026-68251

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T19:15:17Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

  • CWE-665

    Improper Initialization