The flaw occurs while allocating and attaching buffer objects in the Linux kernel DRM Xe DMA subsystem. An empty or prematurely freed buffer can be exposed to the invalidate_mappings callback, which may then dereference a NULL or dangling pointer, causing a crash. The kernel panic resulting from this crash manifests as a denial‑of‑service for the affected system.

Any Linux distribution running a kernel that contains the buggy drm/xe/dma-buf code before the commit that reorders the allocation and attachment steps. Systems that employ AMD GPU drivers (amdgpu) or other drivers interacting with the DRM Xe module are potentially affected.

The CVSS score is not provided. No publicly available exploitation data is listed and the vulnerability is not in CISA’s KEV catalog. Exploitation would require influence over the GPU driver or triggering a race condition in the kernel. Based on the description, it is inferred that a local attacker could potentially trigger this bug, but no remote exploitation path is documented. The primary impact is a kernel crash leading to denial‑of‑service; no additional privilege escalation is specified in the official description.