The vulnerability exists in the Linux kernel’s DRM logging subsystem. When a font scale is set such that the scaled_font would exceed the dimensions of the display, the calculation of rows or columns in drm_log_setup_modeset results in zero. A zero column count causes the drm_log_draw_kmsg_record loop to never decrement its counter, creating an infinite loop that stalls the kernel and results in a system hang. This delivers a denial‑of‑service condition if the affected logging path is exercised by the system.

Any Linux machine running a kernel that includes the drm/log component before the patch that adds a check for zero rows or columns is affected. The advisory does not specify exact version ranges, so the vulnerability is understood to apply to all kernels that lack the updated zero‑dimension validation.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation. No CVSS score is provided. The flaw is triggered by an oversized scale parameter used when rendering DRM logs, a condition that is typically influenced by user or system software that interfaces with the DRM subsystem. Consequently, the most likely attack vector is local or requires elevated privileges to manipulate the scale value or invoke the logging path. Remote exploitation is not indicated by the available data.