Impact
A logic flaw in the kernel GPU driver causes the system to treat a timeout on a kernel‑submitted job as an unexpected event, even when the device has already faulted and the control engine has stopped. This mis‑classification triggers a WARN message and leaves the device’s wedged state unrecovered, ultimately tainting the kernel and undermining system stability. The affected component is the DRM/Xe (Xe graphics) driver path that handles GuC submission failures. The consequence is a loss of kernel integrity and potential denial of service for graphics operations on the compromised machine. The weakness can be mapped to a race condition or improper state transition error. Based on the description, this flaw does not provide remote code execution or privileged escalation but poses a severe reliability risk when kernel queues repeatedly timeout on an already wedged device.
Affected Systems
The vulnerability applies to the Linux kernel, affecting all builds that include the DRM/Xe graphics driver. No specific kernel release or version interval is listed; any kernel incorporating the buggy code path prior to commit a1c1dbd0f047bb05de6aaf6abe9103031179bf19 is potentially vulnerable.
Risk and Exploitability
The EPSS score is not available, and the CVE is not listed in the CISA KEV catalog, indicating a currently low publicly known exploitation probability. No CVSS vector is supplied, so formal severity cannot be calculated from the data. The attack vector appears to be local: an attacker must cause the device to enter a wedged state and trigger a kernel‑initiated job timeout, which is plausible in a multi‑tenant or virtualized environment where GPU resources are shared. Because the flaw leads only to a kernel taint and service disruption, it is less likely to be actively exploited. Nonetheless, the presence of a kernel taint can enable sensitive data leakage or facilitate privilege escalation if combined with other vulnerabilities.
OpenCVE Enrichment