The Linux kernel’s AMD DRM display driver releases the new_stream object during a skip_modeset path but fails to null its pointer. When an error such as a color‑management failure triggers a subsequent error path, dc_stream_release is called again on the dangling pointer, producing a double free and a use‑after‑free. This memory corruption is confined to kernel space and can surface as a kernel crash or other unpredictable behavior. The flaw is a classic double‑free weakness (CWE‑415).

All Linux kernel builds that contain the AMD DRM display code are potentially affected. The vendor list shows a generic Linux entry and no specific kernel versions are listed, so any system that has not incorporated commit 99f3af19073 or later remains vulnerable. Administrators should consult distribution kernel release notes to verify whether the update has been applied.

The vulnerability has a CVSS score of 7.8, classifying it as high severity. Its EPSS score is reported as less than 1%, indicating a low but nonzero likelihood of exploitation, and it is not listed in the CISA KEV catalog. The likely attack vector is a user‑space program interacting with the DRM subsystem—e.g., a local user that triggers the skip_modeset path and then induces a color‑management error to activate the fail label—based on the description, this is inferred. Because the flaw resides in kernel code, exploitation would require local privileges. No public exploits are documented, so the overall risk is moderate but the severity of the potential outcome makes prompt patching important.