A use-after-free condition was discovered in the Linux kernel's i915 DRM driver during TTM object purge operations. When a GPU buffer object is evicted while still busy, the code may replace the TTM page vector container and later access it, causing an invalid memory dereference that results in a General Protection Fault and kernel oops. The CVSS score of 7.8 indicates significant risk, but the CVE description does not explicitly state privilege escalation possibilities.

The flaw affects the Linux kernel; all distributions shipping versions that have not applied the recent patch are exposed. The advisory references kernel 6.18.8 but does not provide explicit roll‑ups beyond this reference, so all kernels lacking the fix are considered vulnerable.

This vulnerability is rated high severity by CVSS and would allow a malicious user with local access who can generate GPU workloads to crash the system. The attack vector is local: the attacker need only run code that exercises the GPU while the driver is in a state where a buffer is being evicted. Given the low EPSS score, the exploit is unlikely to be widespread, but the impact of a kernel panic warrants immediate attention. The flaw is not a known exploit in CISA KEV yet, but the kernel can reboot and lose state.