The vulnerability resides in the Linux kernel’s DRM GPU virtual memory management where the mapper does not acquire the proper lock before performing mapping operations. This race allows a concurrent find operation to dereference a NULL pointer, causing a kernel panic and loss of service. The crash lacks additional privilege escalation or data exfiltration, but it results in denial of service and potential interruption of any applications relying on the affected GPU driver.

The flaw exists in the generic Linux kernel GPU virtual memory subsystem, affecting all distributions and vendor kernels that ship the unpatched drm_gpuva_find implementation. It is exploited through the PowervR driver’s map/unmap ioctl paths. No specific kernel releases are listed, so any running kernel that has not applied the latest upstream patch is potentially vulnerable.

The EPSS score is not available and the vulnerability is not in CISA KEV, indicating limited public exploitation data. However, because the fault can be triggered by user‑space IOCTL calls, a local attacker with access to the DRM device can induce the crash. The lack of a CVSS score in the data suggests that severity is not formally quantified, but the impact of a kernel panic warrants prompt attention. The attack vector is inferred to be local through GPU device IOCTLs, with the condition that a mapping operation occurs while a find is in flight.