The Linux kernel DRM Xe driver releases its runtime power‑management reference asynchronously when a virtual machine is torn down, which allows stale page‑fault work items to be processed while the device has already autosuspended. This leads to an improper use of a device that is no longer active, an instance of CWE‑617, and can trigger an assertion failure that may crash the kernel, resulting in a denial‑of‑service on the host.

All Linux kernel builds that include the DRM Xe driver and have not incorporated the commit that moves the runtime PM reference across the entire page‑fault queue worker are impacted. The advisory does not list specific kernel versions, so any distribution or custom kernel containing the unpatched Xe driver code is vulnerable.

The CVSS score for this issue is 5.5 and the EPSS score is below 1%, indicating a low probability of exploitation in the wild; it also is not present in the CISA KEV list. The likely attack vector is an attacker who can orchestrate a virtual‑machine teardown to trigger stale page‑fault work items while the device is unsafely autosuspended, although precise timing is required for exploitation. Overall, the risk is moderate due to the modest severity score but high because an unpatched kernel can crash and halt the host.