Local kernel compromise via TDR job race

Use-after-free in the Linux kernel 6.10 through 6.11.5 allows local users to corrupt kernel memory through an Intel Xe GPU job race. The drm/xe TDR path frees an xe_sched_job while run_job can still use it, instead of leaving scheduler-owned cleanup to complete naturally. A local user must reach the Intel Xe GPU submission path and win the timeout race; successful reuse of the freed job can expose or alter kernel memory, redirect kernel control flow, or crash the system.