The vulnerability arises from a missing reference release in drm_syncobj_find_fence, causing a memory leak each time the function returns early due to invalid flags. The leak can accumulate over time, potentially exhausting system memory and leading to degraded performance or crashing the kernel, which effectively constitutes a denial of service scenario. The flaw stems from improper handling of reference counting.

All versions of the Linux kernel that contain the buggy drm_syncobj_find_fence implementation are affected. The fix is present in commit 18226ba52159, so any kernel build prior to incorporating that commit remains vulnerable. Users of mainstream distributions that still ship the earlier kernel releases are impacted.

The CVSS score is 5.5 and the EPSS score is < 1%. The flaw is a resource exhaustion issue. Based on the description, it is inferred that a caller with access to the DRM subsystem could repeatedly invoke drm_syncobj_find_fence, leading to memory growth over time. The likely attack vector is user space using DRM operations, though the privilege level required is not explicitly defined in the advisory. The risk is moderate to high in environments where untrusted users might interact with DRM drivers; however, no evidence of remote exploitation is reported. The flaw is not listed in the CISA KEV catalog, indicating that it has not been reported as a widely exploited vulnerability.