Junglewise Threat Intelligence

CVE-2026-68112: Linux kernel amdgpu driver kernel crash on assertion failure

CVE-2026-68112 · Severity: info · Published 2026-08-10

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

The AMD GPU driver component in the Linux kernel used kernel panic calls (BUG_ON) in GPU ring memory operations that could be triggered by normal conditions, causing an immediate system crash. This fix replaces those panic calls with warnings, allowing the system to continue running and log the issue instead of becoming unavailable.

Technical details

The vulnerability exists in the AMD GFX 9.4.3 driver (drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c) where multiple BUG_ON() assertions were placed in GPU ring command submission paths. These assertions checked for memory alignment conditions in functions like gfx_v9_4_3_wait_reg_mem, gfx_v9_4_3_ring_emit_ib_compute, gfx_v9_4_3_ring_emit_fence, and gfx_v9_4_3_ring_emit_fence_kiq. A BUG_ON() call immediately terminates the kernel; if these conditions occur during normal GPU operation, they cause a denial of service. The fix replaces BUG_ON() with WARN_ON(), which logs a warning and allows execution to continue. This is a code hardening change with no known active exploitation.

Affected products

  • Linux Linux kernel all versions with amdgpu GFX 9.4.3 support (approximately 5.14+)

Timeline

  • 2026-06-15: disclosed
  • 2026-07-01: patched

References

Related threats