The flaw, a CWE-772 weakness involving improper resource recovery, occurs in the drm/msm driver when the recover_worker does not trigger a GPU recovery after a hang. Because the worker only increments the ring fence and exits, the GPU remains in a failed state, preventing subsequent work and potentially exhausting resources.

The vulnerability affects the Linux kernel as a whole, with all distributions that ship an unpatched drm/msm driver. No specific version range is listed, but any kernel that includes the buggy recover_worker logic is susceptible until the fix is applied.

The exploit probability is very low (EPSS < 1%) and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a privileged local user submitting workloads that cause a GPU hang on systems using GPU acceleration without proper recovery, a scenario inferred from the described flaw. Mitigation hinges on applying the available patch.