In the Linux kernel DRM driver, a failure path in xe_oa_emit_oa_config leaves synchronization entries and fence references allocated when the function exits early. The driver fails to release these resources on failure, resulting in a kernel memory leak. Repeated or continuous failures can exhaust available memory, leading to system instability or a total loss of kernel responsiveness, effectively a denial‑of‑service condition.

The flaw exists in the Linux operating system kernel; any kernel build that includes the drm/xe/oa driver and has not incorporated the commit that restores the cleanup logic is affected. This includes all Linux kernel versions shipped prior to the application of the fix. There are no specific vendor versions listed beyond the generic Linux platform.

Because EPSS information is not disclosed and the vulnerability is not listed in the CISA KEV catalogue, there is no publicly available evidence of exploitation. Attacking the bug requires invoking the OA configuration ioctl path. Based on the description, it appears that this path generally requires privileged or kernel‑level access. Even though the risk of immediate remote exploitation is low, the memory‑exhaustion effect can cause a local denial‑of‑service if an application or attacker can trigger repeated failures.