The vulnerability in the Linux kernel's drm/i915 component relates to the handling of CRTC color blob pointers. Specifically, the function intel_crtc_put_color_blobs() drops references to these blobs but does not clear the pointers. This can cause issues in intel_crtc_prepare_cleared_state() when a failure occurs during DP tunnel group state lookup (e.g., returning -EDEADLK), leading to incomplete cleared state preparation. Subsequent cleanup operations may then drop the same blob references multiple times, which is unsafe. The fix involves clearing the blob pointers after dropping the references to ensure repeated cleanup is safe.

The vulnerability could cause unsafe repeated cleanup of the same CRTC hardware state, potentially leading to kernel instability or memory corruption due to double dropping of references. No active exploits are known, and the impact is limited to the drm/i915 driver within the Linux kernel.

A fix has been applied in the Linux kernel to clear the CRTC color blob pointers after dropping references, preventing unsafe repeated cleanup. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly stated in the provided data; check the official Linux kernel advisories or repositories for the fixed version details.