CVE-2026-97519

A flaw was found in the Linux kernel's Intel Xe graphics driver. When device core dump cleanup routines are triggered without a completed capture, the driver attempts to access uninitialized snapshot data. A local user could exploit this issue to cause a null pointer dereference, resulting in a system crash and Denial of Service (DoS).

Red Hat rates this flaw as MODERATE. A null pointer dereference flaw was found in the Linux kernel's Intel Xe graphics driver (drm/xe) device core dump (devcoredump) cleanup path. When cleanup routines are triggered without a prior completed capture, xe_devcoredump_snapshot_free() may access snapshot data that was never fully populated (ss->gt may be NULL), and xe_devcoredump_free() may attempt to cancel deferred work that was never queued, resulting in a kernel crash. A local user with access to the Intel GPU DRM device nodes could trigger this code path to cause a system crash and denial of service; there is no impact on confidentiality or integrity.

The flaw affects Red Hat Enterprise Linux 9 and 10 streams that merged DRM changes from upstream v6.12..v6.13, Red Hat In-Vehicle OS 2, and OpenShift Container Platform releases shipping those kernels (4.22 and later, and 5.x). Earlier Red Hat Enterprise Linux streams, RHEL 6, 7, and 8, kernel-rt builds, and earlier OpenShift Container Platform releases are not affected because the vulnerable code is not present in their kernels.

For the affected streams the fix is deferred: because the impact is limited to a local denial of service with no confidentiality or integrity impact, the fix will be delivered in a future scheduled maintenance update rather than as an urgent out-of-band update. Until then, the residual risk is a local kernel crash on systems using Intel Xe graphics.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.