CVE-2026-46220

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The sdma v4 0 ring emit fence() function contains two BUG ON() assertions used to verify that fence writeback addresses are dword-aligned. Unprivileged users can trigger these assertions by submitting crafted 'DRM IOCTL AMDGPU CS' requests, which leads to a fatal kernel panic in a scheduler worker thread.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.