In the Linux kernel, the drm/vkms subsystem’s virtual KMS outputs relied on a custom high‑resolution timer to trigger vblank events. The patch replaces that custom timer with DRM’s standard vblank timer implementation, removing the legacy hrtimer from `struct vkms_output` and directing timeout handling to the DRM helper code. The change corrects inconsistencies in timer logic that could have led to incorrect or delayed vblank notifications. No active exploitation was documented for this flaw.

The impacted component is the vkms driver in the Linux kernel. Any kernel release that includes a legacy vkms module before the application of this patch may contain the outdated timer implementation. Although a specific version range is not listed, administrators should consider older kernel releases that ship the vkms driver as potentially affected.

The CVSS score of 5.5 reflects a moderate effect on system stability, while the EPSS score of <1% indicates a low probability of active exploitation. The vulnerability is not in the CISA KEV catalog and no public exploits are available. The likely attack vector would be local driver interaction; this inference is based on the nature of the timer logic in a kernel subsystem.