A use‑after‑free flaw exists in the Linux kernel DRM subsystem when closing an xe_eu_stall stream. During the close routine, drm_dev_put is called before the stream has been disabled and its resources released. If this drops the last reference to the device structure, the structure may be freed while later cleanup code still accesses it, which can lead to memory corruption or a kernel crash. This classic use‑after‑free issue (CWE‑416) can destabilize the system.

The vulnerability affects any Linux kernel that contains the xe_eu_stall DRM driver prior to the commit that moves drm_dev_put after all device accesses are finished. The affected releases are therefore all kernel versions that have not incorporated the 35aff528f7297e949e5e19c9cd7fd748cf1cf21c change. No specific version range is listed, so hosts running a kernel without this patch are at risk.

No CVSS score is provided and the EPSS score is not available; the vulnerability is not listed in the CISA KEV catalog, indicating that no public exploit is known. Exploitation would require an attacker to trigger the close of an xe_eu_stall stream, which typically implies local privileged access or control of the DRM driver. The potential impact is denial‑of‑service or memory corruption, but no known exploits are documented.