The BCM2835 power domain driver on Broadcom BCM2711 contains a tight polling loop that waits for the ASB bridge to acknowledge control requests. During periods of intensive workload, this handshake can fail, causing the kernel to report "Failed to disable ASB master for v3d" during runtime power‑management suspend. When these handshakes fail, the V3D device is left in a broken state, leading to bus faults or complete system hangs on subsequent accesses. As the issue originates in kernel code and manifests as a loss of device functionality, the primary impact is a denial of service on the affected system, reducing overall stability and availability. The requirement for local or privileged kernel access and the attack vector are inferred from the description.

All Linux kernel releases that support the BCM2835 power domain, including kernel 5.1 and every 7.0 release candidate through 7.0 rc7, are potentially affected. The flaw exists in the BCM2835 module that interfaces with the V3D master ASB on BCM2711 devices, i.e. Raspberry Pi and similar Broadcom SoC boards.

The CVSS score of 5.5 indicates a moderate severity vulnerability. The EPSS score is below 1%, suggesting a low likelihood of widespread exploitation. The issue is not indexed in the CISA KEV catalog, further indicating limited known exploitation activity. The vulnerability requires local or privileged kernel access to trigger, typically by initiating a power‑management suspend while the system is under heavy load. Because it is a kernel bug that causes a hardware resource to remain in a failed state, exploitation does not yield arbitrary code execution but results in services hanging or the system becoming unstable. Therefore, the risk is primarily confidentiality‑side effects are negligible, but integrity and availability are impacted when the fault is triggered. The attack vector is likely local with privileged kernel access, inferred from the need to trigger a power‑management suspend.