In the Linux kernel’s DRM Xe driver, a failed call to xe_dma_buf_init_obj left a dma-buf attachment in kernel memory because dma_buf_detach was not executed. The retained attachment constitutes a memory leak that is never freed, representing a CWE‑772 Unchecked Release of Memory or Resource or the related CWE‑401 Memory Leak. This flaw can increase resident memory usage over time, potentially exhausting kernel memory and causing the system to become unresponsive or crash, effectively disabling the affected workstation or server.

The flaw is confined to the Linux kernel implementation of the DRM Xe driver, exposed through the xe_gem_prime_import function. All Linux distributions that ship the unpatched kernel inherit the issue; no vendor or product version is specified beyond the generic Linux kernel label.

The CVSS score is 7.8, indicating high severity, while the EPSS score is less than 1% and it is not listed in the CISA KEV catalog, indicating a low public exposure. The vulnerability requires local intervention over the DRM subsystem to trigger the failing buffer import, making the attack vector likely local. Because the defect results in a leaked kernel buffer that gradually increases memory consumption, the risk is primarily tied to potential resource exhaustion rather than immediate privilege escalation or data breach.