Setting an invalid GPU engine slot and attempting to configure I915_CONTEXT_PARAM_SSEU causes a NULL dereference in the Linux kernel DRM driver, which leads to a kernel crash. The resulting denial of service can be leveraged by an attacker with access to the graphics subsystem to disrupt system operation or potentially elevate privileges, as the crash occurs in privileged kernel mode. The weakness is a classic NULL pointer dereference.

The flaw exists in the Linux kernel's DRM/i915/gem subsystem, affecting all distributions that ship a kernel version containing the buggy code. No specific version range is listed; the issue is resolved by committing 36eda5b5c2d40da41cc0a5403c26986237cf9e87, so any kernel prior to that commit is vulnerable.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, but the nature of a kernel NULL dereference implies a high potential impact whenever an attacker can trigger the fault. The likely attack vector is local, requiring the attacker to interact with the I915 graphics driver, for example through a malicious application or by using the vulnerable kernel module. An exploit could be triggered by configuring an I915 engine class as invalid and then applying the SSEU parameter, leading to a crash and, if the attacker controls the context, possible escalation to root. The vulnerability was discovered through AI‑assisted static analysis and confirmed by Intel Product Security.