A failure path in the Linux kernel’s DRM XE PF subsystem caused a cleanup action to be executed on a kobject before it had been fully initialized. This resulted in the kobject_put function being called on an uninitialized object, leading to a reference count underflow and a classic use‑after‑free condition (CWE‑416/CWE‑824). The flaw manifests as kernel warnings and can trigger an OOPS or kernel panic, representing an improper object initialization vulnerability.

The defect exists in any Linux kernel that contains the drm/xe/pf driver module and loads it during system or device initialization. No specific kernel version range is provided; therefore any kernel prior to the inclusion of the commit that introduces the safeguard is potentially vulnerable. Only the Linux kernel, as specified by the CNA vendor/product data, is mentioned as the affected system.

The CVSS score is 8.8 and the EPSS score is <1%, indicating a high severity but a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploitation. The likely attack vector requires the drm/xe/pf driver to be loaded, which typically needs local privileged or physical access. An attacker would need such access to trigger the bug, potentially causing a kernel crash and a denial‑of‑service to the host. Given the local‑or‑physical constraints and low EPSS, the overall risk can be considered moderate.