Based on the description, it is inferred that the flaw in the Linux kernel’s DRM Xe driver allows an uninitialized cursor structure to be accessed when a buffer object has been purged. During a page‑table walk the driver reads garbage data from this cursor, triggering kernel warnings and potentially causing an undefined fault or crash, which compromises system stability.

The vulnerability is confined to the Linux kernel’s DRM Xe subsystem, specifically the code within drivers/gpu/drm/xe. Every kernel version that does not contain the commit that adds explicit checks for purged buffer objects and zero‑initializes the cursor is affected.

Based on the description, it is inferred that the attack could be launched locally by an attacker who can manipulate GPU buffer objects, potentially requiring local privileges. The EPSS score is less than 1% and the vulnerability is not listed in CISA KEV, indicating a low probability of exploitation. The CVSS score of 7.8 classifies the vulnerability as high severity, while the likely attack vector is local exploitation via the GPU driver. Although no exploits are currently known, the potential for a kernel crash warrants immediate remediation.