The vulnerability lies in the Linux kernel driver drm/ttm, where pages stored in the ttm_pool_backup structure can be either NULL or backup handles. The code previously attempted to apply write‑back or free operations to these entries without checking for NULL or handle status, which caused a general protection fault due to a NULL pointer dereference. This type of failure manifests as a kernel oops, potentially leading to a crash of the affected system or loss of service for any user or daemon interacting with the graphics subsystem.

All versions of the Linux kernel that include the ttm driver and executable before the patch incorporating the NULL/handle guard are impacted. The specific vendor and product are Linux and the Linux kernel; version information is not explicitly enumerated in the CVE data, so any kernel using the affected ttm subsystem before the stated commit should be considered vulnerable.

The CVSS score is not provided in the CVE data, and the EPSS score is unavailable. Therefore the quantifiable severity and exploitation likelihood cannot be computed. The vulnerability was a bug leading to memory corruption rather than an easily exploitable code execution vector, and it has not been listed in CISA’s KEV catalog. Consequently, the risk is limited primarily to denial of service of the affected machine, but could be leveraged by an attacker already holding kernel write privileges to cause further instability.