CVE-2025-68802

A resource exhaustion vulnerability was found in the Linux kernel's Intel Xe graphics driver. The exec and vm_bind ioctls accept a user-specified num_syncs value without bounds checking. A malicious user can specify an extremely large value, forcing the kernel to attempt an oversized memory allocation that triggers page allocator warnings and potential denial of service.

This vulnerability affects systems with Intel discrete GPUs using the Xe driver. Any user with access to the DRM device node (typically members of the video group) can trigger excessive memory allocation attempts. The fix introduces DRM_XE_MAX_SYNCS (1024) to limit the allocation size and reject oversized requests.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.