CVE-2025-71130: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-71130 is a NULL pointer dereference vulnerability in the Linux kernel's i915 GPU driver (Intel Direct Rendering Manager) within the i915_gem_do_execbuffer function. The flaw was published on January 14, 2026, and affects Linux kernel versions from 5.16 through multiple stable branches up to (but not including) 6.1.160, 6.6.120, 6.12.64, and 6.18.4, as well as 6.19-rc1 through rc8. Microsoft's Azure Linux 3 (azl3_kernel_6.6.119.3-3) is also listed as an affected product. It carries a CVSS v3.1 base score of 5.5 (Medium) (Feedly, kernel.org patches).

The root cause is classified as CWE-476 (NULL Pointer Dereference) and stems from the eb.vma array in i915_gem_do_execbuffer not being zero-initialized at setup time. During eb_lookup_vmas(), the array is populated with struct eb_vma objects; if eb_add_vma() fails partway through, neither the current nor the next vma pointer is set to NULL. The cleanup function eb_release_vmas() uses NULL as its sentinel stopping value, so when it encounters uninitialized (slab-poison) pointer values left by the failed eb_add_vma() call, it attempts to dereference them, triggering a kernel NULL/invalid pointer dereference. The fix zero-initializes the entire eb.vma array at the start of i915_gem_do_execbuffer, eliminating the need for manual NULL-setting during error paths (Feedly, kernel.org patches).

Successful exploitation allows a low-privileged local user to trigger a kernel crash (denial of service) on systems with Intel integrated graphics by submitting crafted GPU buffer execution operations that cause eb_add_vma() to fail. This results in system instability and potential kernel memory corruption on affected Intel-based systems. There is no confidentiality or integrity impact; the vulnerability is limited to availability (Feedly).

Update the Linux kernel to a patched stable version: 6.1.160 or later (for the 5.16.1–6.1.x series), 6.6.120 or later (for the 6.2–6.6.x series), 6.12.64 or later (for the 6.7–6.12.x series), or 6.18.4 or later (for the 6.13–6.18.x series). Users of Microsoft Azure Linux 3 should apply the updated kernel package when available from Microsoft. If immediate patching is not feasible, restrict local system access to trusted users only, since exploitation requires local low-privilege access. Monitor for unexpected kernel panics or system crashes on Intel GPU-equipped systems as a potential indicator of exploitation attempts (Feedly, kernel.org patches).