This vulnerability occurs in the Linux kernel DRM Xe scheduler, where the scheduler holds a pointer to the timeline name that is freed when the exec queue is released while fences may still reference it. The result is a use‑after‑free that can corrupt kernel memory, potentially leading to system crashes or privilege escalation. The weakness is identified by CWE‑416 (Use After Free) and CWE‑825 (Resource Management).

All Linux kernel builds that include the DRM Xe scheduler and contain the referenced scheduling code are affected. The vulnerability exists before the commit 41075f0eb5dcbd3b065d15f15ef7bbe9315188e8 is applied; no specific release versions are listed, so any older kernel lacking this patch is potentially vulnerable.

The CVSS score of 7.8 indicates a high severity, while the EPSS score of <1% reflects a very low probability of exploitation at this time. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local, requiring an attacker to interact with the GPU driver or submit crafted commands to the DRM Xe scheduler; based on the description, it is inferred that remote exploitation would be difficult without additional privileges. If successfully exploited, the attacker could cause kernel memory corruption, crash the system, or possibly gain elevated privileges.