Cloudanix VulnDB

CVE-2026-68249

None

CVSS

—

EPSS

0.2%

Published

Aug 10, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A Linux kernel driver for certain AMD graphics cards could crash the whole computer when it hit an unexpected situation, and the fix stops it from crashing so hard.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Low
Impact
Denial Of Service
Component
OS kernel
Class
Denial of service
Remediation
Patch
Effort
Low
Patch risk
None

What it actually does

The vulnerability allows specific error conditions in the amdgpu sdma5.0 driver to invoke BUG_ON, triggering an immediate kernel panic instead of continuing with a warning.

Why it matters to the business

Systems using AMD GPUs may experience unexpected full-system crashes and restarts, leading to unplanned downtime and loss of workloads on affected Linux kernels.

How an attack unfolds

An attacker with the ability to exercise the SDMA engine on an AMD GPU triggers one of the error paths previously guarded by BUG_ON, causing the kernel to panic and the system to reboot or halt.

How to fix it

Update to a Linux kernel containing the commit that replaces the BUG_ON calls with WARN_ON in drm/amdgpu/sdma5.0; monitor vendor advisories for the specific kernel version that back-ports the change.

How to confirm the fix worked

Confirm the presence of the fix by inspecting the amdgpu sdma5.0 source for WARN_ON in place of the previous BUG_ON statements or verify the kernel changelog includes the referenced commit.

Typical attack path

  1. Obtain local access or a user-space workload that can submit SDMA commands to the AMD GPU
  2. Craft input or workload that exercises the error condition in sdma5.0
  3. Trigger the BUG_ON path resulting in immediate kernel panic

How to detect it

Examine kernel logs and crash dumps for panics originating from amdgpu sdma5.0 code paths; look for BUG_ON-related stack traces in dmesg or systemd journal prior to the patch date.

What your security team should do

  • Prioritize kernel updates for any Linux systems that include the amdgpu driver
  • Test the updated kernel on representative AMD GPU hardware before broad deployment
  • Review logs for prior kernel panics referencing amdgpu sdma5.0 as part of post-patch validation

The record

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry picked from commit 8d144a0eb09537055841af48c9e7c2d4cd48e84d)

Affected packages

Ecosystem Package Introduced Fixed