The Linux kernel DRM XE driver contains a flaw where Device Page Table (DPT) allocation paths improperly use a fallback that can force VRAM to map to system memory, leading to pipe fault errors and a black screen. The driver also fails to account for the amount of stolen memory used, so an attacker or misconfigured system could fill the entire stolen region with DPT entries. This memory exhaustion can cause random system hangs under load and disrupt normal operation.

All Linux kernel distributions that ship the DRM XE driver are potentially impacted. The kernel source indicates the vendor as Linux, and specific version information is not provided, so any kernel build that contains the unpatched DRM XE code and is running GPU drivers that utilize this path may be vulnerable.

The vulnerability has a high impact as it can lead to service disruption via memory exhaustion. No EPSS score is available and the issue is not listed in the CISA KEV catalog. The likely attack vector involves privileged use of the DRM XE driver or local kernel access; an attacker could trigger the faulty allocation path to exhaust stolen memory and cause the system to hang.