The vulnerability in the Linux kernel drm/panthor driver involves a use-after-free condition on kernel buffer object virtual address (BO VA) nodes. When the MMU is disabled, panthor_vm_unmap_range() may return an error, but the code previously exited early without removing the va_node from the drm_mm tree. This left stale references that could be freed later, causing UAF. The patch corrects this by continuing cleanup despite MMU errors, ensuring the va_node is properly removed and preventing UAF.

Successful exploitation could lead to use-after-free conditions in kernel memory management, potentially allowing an attacker with limited privileges (local access with low privileges) to cause memory corruption. The CVSS vector indicates high confidentiality, integrity, and availability impact, meaning exploitation could lead to full system compromise or denial of service. However, exploitation requires local access and the MMU to be down, which may limit practical exploitation scenarios.

A fix has been implemented in the Linux kernel to address this vulnerability. Users and administrators should apply the official kernel updates that include this patch once available. Since this is not a cloud service, remediation depends on updating the affected Linux kernel versions. Patch status is not yet confirmed in this data; check the vendor advisory or Linux kernel mailing lists for the official patch and update guidance.