CVE-2025-71296

A flaw was found in the Linux kernel's drm/shmem component. This vulnerability occurs when the reservation lock is not properly held around the purge operation within the drm_gem_shmem_purge_locked() function, which is part of the kernel's test infrastructure. This oversight can lead to a kernel warning, potentially causing system instability or a denial of service (DoS).

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and targets KUnit testing routines rather than production graphics driver workflows, restricting the potential consequence to kernel warnings or denial of service. Standard deployments do not execute these diagnostic test suites during routine system operations, which significantly diminishes real-world exposure. Furthermore, confidential data and system integrity remain unaffected as the flaw does not facilitate privilege escalation or unauthorized data access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.