The vulnerability resides in the Linux kernel graphics driver for Intel GPUs. It allows the kernel to deallocate memory objects that are outside the bounds of a valid execution array. This out‑of‑bounds release can corrupt kernel memory and may provide an attacker with a path to execute arbitrary code with kernel privileges.

The issue affects the Linux kernel, specifically the i915 DRM subsystem. No specific kernel versions are listed in the data, but any kernel build using the unpatched i915 driver is potentially affected. Only the Linux operating system is listed as the affected vendor.

The CVSS score of 7.8 indicates a high‑to‑critical impact vulnerability. The EPSS score of less than 1% suggests that exploitation likelihood is very low, and the vulnerability is not listed in the CISA KEV catalog. It remains a local kernel exploitation vector requiring access to the i915 DRM subsystem. Successful exploitation could lead to unrestricted kernel‑level code execution, effectively granting an attacker full system compromise. Given the kernel context and the high CVSS rating, the overall risk is considered significant, but the low EPSS score reduces the immediate threat pending patching.