A high-severity deadlock vulnerability in the Linux kernel drm/xe driver could allow a local attacker to cause a system-wide denial of service.

This is a race condition vulnerability within the GuC execution queue destruction process. By triggering asynchronous queue destruction, a local attacker with low privileges can induce a deadlock, as the system fails to correctly manage device references during cleanup operations.

The primary impact of this vulnerability is a denial of service, where the affected system becomes unresponsive and requires a hard reboot. With a CVSS score of 7.8, this flaw represents a significant risk to system availability, particularly for servers or workstations running the affected kernel versions. Unauthorized users with local access can disrupt critical business operations by intentionally triggering this deadlock.

Immediate Action: Update your Linux kernel to version 7.1.6 or later, as these versions incorporate the necessary fixes for the drm/xe/guc driver.

Proactive Monitoring: Monitor system logs for kernel panic events or unexplained driver-related hangs, particularly when utilizing the Xe graphics driver.

Compensating Controls: Restrict local access to critical systems where possible to minimize the attack surface, as exploitation requires an authenticated local user.

Public Exploit Available: Unknown

Given the severity of potential system instability, administrators should prioritize patching the Linux kernel to the identified secure versions. While the vector requires local access, the ease of triggering a kernel deadlock makes this a high-priority maintenance item for systems utilizing the Xe drm driver.