The vulnerability is a runaway loop in the Intel DisplayPort MST (Multi‑Stream Transport) handling code. During interrupt processing the driver repeatedly services interrupts from a connected sink device without any bound, which can cause the CPU to become completely busy. This can lead to application or system slowdown or complete lock‑up for the user or processes that rely on the GPU driver. The flaw is a classic uncontrolled loop leading to resource exhaustion, and it also exhibits characteristics of CWE-746 (Insecure Default Configuration) and CWE-835 (Integer Overflow or Wraparound).

All Linux kernel builds that include the i915 DRM driver with Multi‑Stream Transport support are potentially affected. This includes any system running a Linux kernel version that incorporates the i915 driver from the kernel development tree but has not yet received the fix present in commit b4ea527.

EPSS score of < 1% indicates a very low probability of exploitation. The CVSS score of 4.6 classifies this vulnerability as low‑to‑moderate in severity. The vulnerability is not listed in the CISA KEV catalog. The absence of a bound on the DP MST ESI service loop suggests the flaw can be triggered by a local attacker via a malicious sink device or by a user with sufficient privileges to cause repeated interrupt events. Based on the description, it is inferred that the likely attack vector involves a compromised or maliciously configured DisplayPort receiver that continually generates interrupts while connected to an Intel GPU. The impact is a denial of service that can stall GPU‑dependent processes and degrade system responsiveness. This flaw is most relevant to systems with Intel graphics hardware and where DP MST is in use.