Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()

There's no need to crash the kernel for these cases.

(cherry picked from commit 9723a8bed3aa251a26bee4583bac9d8fb064dd44)
Published: 2026-08-10
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel’s AMDGPU SDMA 7.0 driver contained a BUG_ON that could trigger a kernel panic under specific internal conditions. The patch replaces the BUG_ON with a WARN_ON, preventing the crash. This weakness is classified as CWE-617, indicating an unexpected sign extension or similar flaw that could be abused to cause a denial of service by destabilizing the system through a kernel panic.

Affected Systems

All Linux kernel releases that ship with the drm/amdgpu/sdma7.0 driver before the application of commit 9723a8bed3aa251a26bee4583bac9d8fb064dd44 are affected. The issue resides within the kernel’s AMDGPU subsystem, covering all vendors that distribute the kernel with this driver compiled in.

Risk and Exploitability

The EPSS score is < 1% and the vulnerability is not listed in CISA’s KEV catalog, indicating a low probability of exploitation. The CVSS score is 5.5, indicating moderate severity. Based on the description, it is inferred that an attacker with local access or control of a user‑space application could trigger the erroneous condition in the GPU driver, potentially causing a kernel panic—but the patch turns this into a warning, limiting impact. The mitigation requires updating to a kernel that includes the patch or applying the kernel change manually.

Generated by OpenCVE AI on August 13, 2026 at 08:11 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the installed Linux kernel to a version that includes the commit replacing BUG_ON with WARN_ON
  • If a full kernel update is not feasible, apply the relevant patch from the provided git commit to the driver source and rebuild the kernel
  • Monitor system logs for WARN_ON messages related to the AMDGPU driver and isolate any processes invoking GPU operations to prevent repeated panic conditions

Generated by OpenCVE AI on August 13, 2026 at 08:11 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4745-1 linux-6.12 security update
History

Thu, 13 Aug 2026 06:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-730
CWE-739

Wed, 12 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Mon, 10 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-730
CWE-739

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry picked from commit 9723a8bed3aa251a26bee4583bac9d8fb064dd44)
Title drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-18T06:55:52.977Z

Reserved: 2026-07-30T09:28:09.377Z

Link: CVE-2026-68252

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-10T13:20:13.750

Modified: 2026-08-18T07:16:51.293

Link: CVE-2026-68252

cve-icon Redhat

Severity : Low

Publid Date: 2026-08-10T00:00:00Z

Links: CVE-2026-68252 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T08:15:05Z

Weaknesses