The vulnerability in the Linux kernel drm/display/dp_mst component arises from improper handling of the VCPI value when releasing a timeslot. If a DP 2.1 monitor disconnects and the delayed_destroy_work triggers afterward, VCPI can become zero. The code attempts to compute a payload mask using a negative bit shift (~BIT(vcpi - 1)), which is invalid and causes a shift-out-of-bounds error detected by UBSAN. This leads to kernel warnings and potential instability. The fix adds a check to skip changing the payload mask if VCPI is zero, preventing the negative shift operation.

The vulnerability can cause kernel warnings and instability due to a shift-out-of-bounds error in the DRM DP MST topology code. It does not impact confidentiality, integrity, or user interaction but results in denial of service through kernel crashes or instability. There is no indication of code execution or privilege escalation from this issue.

A fix has been implemented in the Linux kernel to add protection against zero VCPI values by skipping payload mask changes when VCPI is zero. Users should update to the patched kernel version to remediate this issue. Patch status is not explicitly stated in the input data; therefore, check the vendor advisory for the current remediation guidance.