The vulnerability in the Linux kernel drm/msm/dpu component arises from mixing devm-managed and drmm-managed memory functions. Specifically, devm_kzalloc() was used to allocate WB connector data, which is freed during driver teardown, while userspace could still interact with the WB connector via drmm functions. This mismatch causes a use-after-free condition. The patch replaces devm_kzalloc() with drmm_ functions in dpu_writeback_init() to ensure consistent memory management and prevent use-after-free.

This use-after-free vulnerability could lead to memory corruption or kernel instability if exploited, potentially allowing attackers to cause denial of service or other unintended behavior. However, no known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel source to address this issue by changing the memory allocation method in the drm/msm/dpu driver. Users should apply the official kernel updates that include this patch. Patch status is not explicitly confirmed here; check the vendor or kernel mailing list advisories for the exact fixed versions and update accordingly.