The flaw involves the drm/panthor driver acquiring a fence lock with the non‑IRQ‑safe variant. When a dma_fence object is accessed from hardirq context in other subsystems, this lock choice can block hardirq handlers, potentially causing deadlocks, kernel crashes, or system instability. Although the description does not mention code execution, the synchronization error can lead to denial of service by freezing the affected system.

All Linux kernel implementations that include the panthor DRM driver before the patch commit. The vulnerability is present in any kernel that does not incorporate the change that forces the IRQ‑safe lock and guard‑model usage. No specific version range is listed, so any kernel prior to the fix is potentially impacted.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves drivers exposing dma_fence objects to hardirq contexts; an attacker with control of such a subsystem could trigger the improper lock acquisition. While the exact exploitation complexity is unclear, the flaw could lead to deadlock or crash, resulting in denial‑of‑service.