A vulnerability in the Linux kernel's drm/xe component could cause a NULL pointer dereference when evicting a buffer object (BO) that has no associated resource. This occurs when an imported dma-buf BO's resource is freed during teardown but its attachment remains live, leading to a fault in the eviction process. The issue has been fixed by skipping eviction for BOs without resources.