The vulnerability causes an infinite loop during the swapout process of the DRM TTM allocator, which can lock the kernel and result in a denial of service. The loop occurs when a failed swapout attempts to restore bulk_move membership, placing the resource ahead of its own hitch node and leading the walk cursor to revisit the same resource repeatedly. The flaw is tied to internal resource management and does not directly expose data or provide remote code execution. Based on the description, the likely attack vector is local: an load or interact with DRM drivers, or with elevated kernel privileges, could trigger swapout failures and induce the loop.

All Linux kernel installations that employ the DRM TTM subsystem are potentially impacted. The issue does not specify a particular kernel version, so any build of the Linux kernel that includes the drm/ttm component before the patch is vulnerable until the kernel is updated. Vendors should verify that their kernel releases incorporate the commit that defers the bulk_move deletion to the successful swapout path.

The CVSS score of 5.5 indicates a medium severity vulnerability, and the EPSS score of <1% suggests a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because it can cause a kernel freeze, the risk is significant for systems requiring high availability. Exploitation requires a local attacker with sufficient privileges to induce swapout failures or to load modified DRM modules, making a purely remote attack unlikely.