CVE-2026-72359

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user could trigger a NULL pointer dereference when querying memory statistics for a buffer object that has been purged. This issue arises because the driver attempts to access a NULL resource, which can lead to a system crash and result in a Denial of Service (DoS).

A moderate-impact NULL pointer dereference flaw was found in the Linux kernel's drm/xe graphics driver. When a buffer object is purged, its ttm.resource pointer is set to NULL while the object remains in the client's object list until userspace closes the GEM handle; if memory statistics are queried during this window (for example, on device resume after a 'dontneed'-marked buffer object's pages have been dropped), bo_meminfo() dereferences the NULL resource, causing a kernel panic. A local user with access to the DRM subsystem can trigger this crash, resulting in a denial of service against system availability, with no impact on confidentiality or integrity. Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernels (including kernel-rt and kernel-ivos-qualcomm components) are not affected by this flaw because the vulnerable drm/xe driver code is not present in the shipped kernels. Red Hat rates the severity of this flaw as moderate, with a CVSS 3.1 base score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.