The vulnerability causes an infinite loop during the swapout process of the DRM TTM allocator, which can lock the kernel and result in a denial of service. The loop occurs when a failed swapout attempts to restore bulk_move membership, placing the resource ahead of its own hitch node and leading the walk cursor to revisit the same resource repeatedly. The flaw is tied to internal resource management and does not directly expose data or provide remote code execution. The likely attack vector is local: an attacker with the ability to load or interact with DRM drivers, or with elevated kernel privileges, could trigger swapout failures and induce the loop.

All Linux kernel installations that employ the DRM TTM subsystem are potentially impacted. The issue does not specify a particular kernel version, so any build of the Linux kernel that includes the drm/ttm component before the patch is vulnerable until the kernel is updated. Vendors should verify that their kernel releases incorporate the commit that defers the bulk_move deletion to the successful swapout path.

The CVSS score is not provided, and EPSS information is unavailable, so the exact exploitation probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. However, because the flaw can cause a kernel freeze, the risk is significant for systems that require high availability. Exploitation requires a local attacker with sufficient privileges to induce swapout failures or to load modified DRM modules, making the attack less likely in a strictly remote scenario.