CVE-2025-68802

CVE-2025-68802 is a vulnerability in the Linux kernel's DRM/xe driver, specifically affecting Intel graphics. It allows a local attacker to trigger excessive memory allocations by providing an unvalidated large num_syncs value during exec or vm_bind ioctl calls, leading to kernel warnings and potential denial of service. The vulnerability has a FAUCET Risk Score of 39/100, indicating a moderate severity. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has garnered significant community discussion and media coverage. A fix has been implemented by limiting num_syncs to DRM_XE_MAX_SYNCS (1024).