CVE-2025-71076

A resource exhaustion flaw was found in the Intel Xe graphics driver's observability architecture (OA) interface. The OA open parameters did not validate the num_syncs value, allowing userspace to request arbitrarily large allocations. A malicious user could exhaust kernel memory by providing extreme values.

This affects systems with Intel Xe discrete graphics hardware. Exploitation requires access to the DRM device file, typically available to users in the video group. The fix adds input validation to reject excessive num_syncs values.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.