CVE-2026-98391

A LOW impact denial-of-service flaw was found in the Linux kernel Intel Xe graphics driver as shipped in Red Hat Enterprise Linux 9 and 10 and in Red Hat In-Vehicle OS 2. During graphics virtual memory (VM) teardown, the driver drops the VM's runtime power management reference asynchronously, which can allow the graphics device to autosuspend while page faults belonging to the now-dead VM are still queued. When the page fault worker later tries to acknowledge one of these stale faults, it accesses the already-suspended device, tripping an assertion failure and a kernel WARNING that can crash the kernel. A local user with access to the graphics device could trigger this race condition to cause a denial of service; no confidentiality or integrity impact is established. The vulnerable code is not present in earlier Red Hat Enterprise Linux streams (RHEL 6, 7, 8, the RHEL 9.2 through 9.8 update streams, and RHEL 10.0/10.2) or in OpenShift Container Platform, so those products are not affected. For the affected streams (RHEL 9.9, RHEL 9.10, RHEL 10.3, RHEL 10.4, and Red Hat In-Vehicle OS 2 kernels) the fix is currently deferred, leaving a residual risk of local denial of service. Although the Red Hat CVSS:3.1 score of 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) maps to Moderate severity, Red Hat rates the overall impact of this flaw as LOW because exploitation requires a local account and depends on winning a race between asynchronous VM teardown and device autosuspend, with only availability of the local system affected.