The vulnerability arises when the PF side of the Linux DRM/xe/pf interface processes FAST_REQ or EVENT relay messages, which it is not designed to handle. This mis‑processing can break the VFPF ABI protocol and may trigger a kernel assertion, potentially leading to a kernel panic and service interruption. The weakness is related to improper input validation or protocol handling.

All Linux kernel builds that include the unpatched DRM/xe/pf implementation are affected. The bug manifests in any distribution kernel where the relevant driver is loaded prior to the commit that removes the incorrect processing logic. No specific vendor or version list is provided, indicating that the issue existed across all upstream Linux kernel releases until the patch was applied.

The CVSS score of 8.4 indicates high severity. The hop from a malformed message to a kernel crash represents a local denial-of-service risk. Because the patch removes the handling on the PF side, an attacker would need the ability to send crafted relay messages to the PF, which normally requires kernel or privileged device interactions. The EPSS score is less than 1% and the vulnerability is not listed in CISA KEV, suggesting limited externally observed exploitation. Nevertheless, the high severity indicates that immediate patching is warranted. The likely attack vector is local, involving manipulation of DRM/xe communication channels.