Cloudanix VulnDB

CVE-2026-68250

None

CVSS

—

EPSS

0.2%

Published

Aug 10, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A bug in the Linux kernel's handling of certain AMD graphics hardware could cause the entire computer to crash unexpectedly instead of handling the problem more gracefully.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Low
Impact
Denial Of Service
Component
OS kernel
Class
Denial of service
Remediation
Patch
Effort
Low
Patch risk
Low

What it actually does

The vulnerability allows specific driver conditions in the AMD GPU SDMA 5.2 code path to trigger a BUG_ON() assertion, resulting in an immediate kernel panic and denial of service.

Why it matters to the business

Systems using affected AMD GPUs can experience unexpected kernel crashes and reboots, causing unplanned downtime and potential data loss during graphics or compute workloads; low EPSS and absence from KEV indicate limited real-world exploitation risk 76 days after publication.

How an attack unfolds

An attacker with the ability to exercise the SDMA 5.2 driver (for example via userspace graphics APIs or compute workloads) supplies input that reaches the buggy assertion paths, causing the kernel to panic rather than continue with a warning.

How to fix it

Update the Linux kernel to a version containing the commit that replaces BUG_ON() with WARN_ON() in the amdgpu SDMA 5.2 driver; apply vendor-supplied kernel packages as they become available.

How to confirm the fix worked

Confirm the presence of the fix by inspecting the kernel source or changelog for replacement of BUG_ON() with WARN_ON() in drm/amdgpu/sdma5.2; test that the previously crashing conditions now produce warnings instead of panics.

Typical attack path

  1. Obtain local or remote access sufficient to submit work to the AMD GPU SDMA engine
  2. Trigger code paths that previously invoked BUG_ON() in drm/amdgpu/sdma5.2
  3. Force the kernel to crash, achieving denial of service

How to detect it

Search kernel logs and crash dumps for amdgpu SDMA 5.2 related BUG() or panic messages; correlate with process activity that exercises the GPU SDMA engine.

  • BUG_ON.*sdma5.2
  • amdgpu.*sdma5.*panic
  • kernel BUG at drivers/gpu/drm/amd/amdgpu/sdma5.2

What your security team should do

  • Prioritize kernel updates on systems with AMD GPUs that use the SDMA 5.2 engine
  • Monitor vendor kernel advisories for the backported commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af
  • Review graphics and compute workloads for unexpected kernel oops or panic events referencing amdgpu sdma

The record

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry picked from commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af)

Affected packages

Ecosystem Package Introduced Fixed