CVE-2026-46220
kernel: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 28, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's AMDGPU graphics driver (drm/amdgpu/sdma4). An unprivileged local user could exploit this vulnerability by submitting specially crafted DRM_IOCTL_AMDGPU_CS commands with misaligned fence writeback addresses. This could trigger a BUG_ON assertion, leading to a fatal kernel panic and causing a Denial of Service (DoS) on the system.
Statement
This vulnerability is rated as Moderate because exploitation requires local authenticated access with direct permissions to AMD GPU rendering devices, confining the impact strictly to a denial of service without compromising system confidentiality or integrity. Standard Red Hat Enterprise Linux server environments rarely utilize or expose AMD discrete graphics cards, significantly restricting real-world exposure. On systems where AMD graphics adapters are present and accessible, unprivileged local users can force a kernel panic to disrupt availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input