The Linux kernel driver for Intel Xe graphics allocates an array of virtual memory areas (VMA) during xe_vm_madvise_ioctl. When the new L2 flush validation routine rejects certain SVM/userptr ranges after that allocation, the code jumps directly to the finalisation routine without freeing the VMA array, causing a memory leak. Repeated execution of the failing ioctl would gradually consume kernel address space and memory, potentially leading to kernel out‑of‑memory conditions and service disruption. The weakness is a resource management defect (CWE‑772). No privilege escalation or arbitrary code execution is possible, only local memory exhaustion.

The flaw exists in the DRM xe component of the Linux kernel. All kernel releases that include the xe driver and have not incorporated commit c3a1c3579b1250060da73507a4acef712974c78a are affected. Affected architectures include mainstream desktop and server kernels that ship Intel graphics support. No specific version range is supplied in the advisory, so any kernel including the driver is potentially vulnerable until fixed.

The CVSS score of 5.5 indicates a moderate severity. The EPSS score is < 1%, suggesting a very low likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local; any user with permission to access /dev/dri/* devices can invoke xe_vm_madvise_ioctl to trigger the leak. While elevated privileges are not required, a persistent or repeated attack could exhaust system memory, causing kernel crashes or degraded system availability.