CVE-2025-71076

CVE-2025-71076 addresses a vulnerability in the Linux kernel's drm/xe/oa component, where the OA open parameters failed to validate the num_syncs value. This allowed unprivileged users to request excessively large memory allocations, potentially leading to system instability or denial of service. While no CVSS score is available, the vulnerability's nature suggests a local attack vector with low complexity, as it involves unchecked user input. There is no evidence of active exploitation, nor are there public exploit modules or proof-of-concept code. However, the vulnerability has garnered some community discussion and media coverage, including a security update from openSUSE.