CVE-2025-71130

A flaw was found in the Linux kernel's drm/i915/gem graphics driver. This vulnerability occurs due to improper initialization of an array, which can lead to a NULL dereference during cleanup operations. A local attacker with access to the i915 DRM device can exploit this flaw by submitting specific commands, causing the kernel to crash and resulting in a denial of service.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with permissions to interact with Direct Rendering Manager (DRM) interfaces, precluding remote attack vectors. Additionally, exposure is confined to hardware configurations utilizing Intel graphics adapters handled by the i915 driver. Typical server deployments that do not expose GPU rendering nodes to unprivileged users or operate headlessly are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.