CVE-2025-40086

A flaw was found in the Linux kernel's Intel Xe GPU driver. During an array of VM bind operations, buffer objects (BOs) within the same VM can be incorrectly evicted under certain conditions. This eviction leads to NULL pointer dereferences later in the bind pipeline when the code attempts to access the evicted resources. A local user with access to Intel Xe GPU resources could trigger this condition, causing a kernel crash and denial of service.

This vulnerability affects systems with Intel discrete GPUs using the Xe driver. Exploitation requires local access and the ability to perform GPU memory management operations. The impact is limited to denial of service through a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the xe module from being loaded if Intel discrete GPU functionality is not required. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.