The defect originates in the Linux kernel's DRM Xe virtual memory subsystem. When a VM is closed, page tables (PTs) are freed before pending VMAs are unlinked, causing a race that leads to a NULL pointer dereference in the function xe_pt_zap_ptes during a concurrent eviction. The resulting kernel panic would stop system operation, providing an attacker with a denial‑of‑service condition. This is a classic race‑condition flaw that culminates in a NULL pointer dereference (CWE-476).

Any Linux kernel that contains the DRM Xe driver is potentially vulnerable; the CVE data does not specify a particular kernel version, so the risk applies to all affected builds that have not yet incorporated the fix.

Based on the description, it is inferred that an attacker would need to generate buffer objects subject to eviction while page table destruction is pending. This scenario could be achieved by user‑space graphics applications or malicious code with similar permissions. The vulnerability is not listed in CISA's KEV catalog and has an EPSS score of less than 1%. The CVSS score of 7.8 indicates high severity. Despite the high CVSS rating, the impact of a kernel crash is severe, and a non‑trivial but achievable race condition makes this a vulnerability that should be addressed promptly.