The Linux kernel's drm/xe module contained a vulnerability where the q->replay_state pointer was overwritten without checking if it was already set, causing a potential memory leak of previously allocated memory from vmemdup_user(). The patch modifies exec_queue_set_hang_replay_state() to return an error if q->replay_state is not empty, thereby preventing the leak. This vulnerability was identified through AI-assisted static analysis and validated by Intel Product Security. No CVSS score or exploit in the wild is currently reported.

The vulnerability could lead to a memory leak in the Linux kernel drm/xe component, which may degrade system stability or performance over time due to unreleased memory. There is no indication of direct code execution or privilege escalation from this issue. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to address this memory leak by returning an error when replay_state is not empty. Users should apply the official kernel updates that include this patch once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the official patch and update guidance.