CVE Database›Document archive›CVE-2026-46220

CVE-2026-46220

kernel: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 28, 2026

Updated · November 1, 2026

Description

A flaw was found in the Linux kernel's AMDGPU graphics driver (drm/amdgpu/sdma4). An unprivileged local user could exploit this vulnerability by submitting specially crafted DRM_IOCTL_AMDGPU_CS commands with misaligned fence writeback addresses. This could trigger a BUG_ON assertion, leading to a fatal kernel panic and causing a Denial of Service (DoS) on the system.

Statement

This vulnerability is rated as Moderate because exploitation requires local authenticated access with direct permissions to AMD GPU rendering devices, confining the impact strictly to a denial of service without compromising system confidentiality or integrity. Standard Red Hat Enterprise Linux server environments rarely utilize or expose AMD discrete graphics cards, significantly restricting real-world exposure. On systems where AMD graphics adapters are present and accessible, unprivileged local users can force a kernel panic to disrupt availability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input