The vulnerability resides in the Linux kernel DRM colorop driver where blob references are not correctly released during state duplication, destruction, and reset. This results in memory leaks never decremented before freeing the state memory. The primary potentially leading to exhaustion and system instability. The weakness is a resource management issue, classified as CWE‑911.

The flaw affects any Linux kernel that includes the drm/colorop module without the patch. This encompasses all mainstream distributions running recent kernel versions that support the colorop driver, as the CPE indicates a global Linux kernel impact. No specific vendor code versions are listed, so any kernel in use should be upgraded to a version that contains the fix.

With a CVSS score of 5.5, the vulnerability is considered moderate severity. The EPSS score is below 1% and it is not listed in the CISA KEV catalog, indicating low exploitation probability as of now. If an attacker can force repeated state duplications or resets— for example by feeding malicious events to the DRM subsystem—the cumulative memory leaks could be accelerated, creating a denial‑of‑service condition. The attack vector is likely local or requires privileged access to trigger the kernel DRM functions, as the payload relies on kernel state manipulation rather than external code execution.