The vulnerability arises from a double call to drm_sched_entity_fini() within the DRM Imagination driver. This misuse of the API results in a refcount underflow and an ensuing use‑after‑free, which produces a kernel panic. The crash can be triggered by operations on the GPU/DRM device and leads to a denial of service, potentially affecting all users of the affected kernel.

All Linux kernel builds that contain the Imagination DRM driver before the fix, including the 7.0.0‑rc7‑02049‑g5e2c0700091b build referenced in the report. The issue is specific to the powervr driver within the DRM subsystem and would impact devices that load or use this driver.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Without a publicly demonstrated exploitation vector, the risk is primarily local; a privileged or compromised user who can load or use the powervr DRM driver can trigger the double‑free, leading to a crash. The CVSS base score is not supplied, but the nature of the bug indicates a medium‑to‑high impact for systems using the affected driver. The attack vector is likely direct, via legitimate GPU operations, and does not require an external network connection.