The Linux kernel DRM i915 graphics driver contains an error in the handling of the BALANCE/PARALLEL_SUBMIT extension during context creation. After a successful context creation, an error in processing the next user extension causes the siblings[] array to be leaked. This flaw enables the disclosure of internal kernel data, potentially exposing sensitive information. The weakness aligns with CWE‑200 (Sensitive Information Exposure).

The vulnerability affects the Linux kernel’s DRM i915 subsystem. No specific kernel version range is listed, so any kernel that does not contain the upstream commit that introduced the fix (aa65e0a4b51b3b54b53e4142aaa2d997aa1061ff) is potentially impacted.

There is no CVSS score provided and the EPSS score is not available. The flaw is not listed in CISA’s KEV catalog and has not yet been reported as exploited in the wild. Exploitation requires local access to the kernel through the DRM interface, which typically means a user process with GPU access. While the impact is limited to potential information disclosure, the lack of exploitation data suggests moderate risk, yet the absence of a publicly documented exploit means this vulnerability should be mitigated promptly.