In the Linux kernel DRM/xe subsystem, non-migratable memory faults that require devmem were incorrectly routed to an out code path, which discarded the intended error code. As a result, higher kernel layers receive a success status instead of a failure, masking the fault and potentially allowing operations to continue with incorrect assumptions about memory access or device state. This flaw is a misuse of error reporting (CWE‑390).

The vulnerability exists in all builds of the Linux kernel that lack the remediation commit c4508edb2c723de93717272488ea65b165637eac. It affects the core Linux kernel across all distributions that ship vanilla or unpatched kernels and will be mitigated once the kernel includes the commit.

No CVSS or EPSS data is available for this vulnerability, and the vulnerability is not listed in the CISA KEV catalog. The flaw requires a local context where a process can trigger a devmem fault; it does not grant remote code execution. The potential impact is limited to incorrect error handling that could lead to subtle device or memory misbehaviour, so the risk is considered moderate until a patch is deployed.