The vulnerability in the Linux kernel's drm/rockchip driver stemmed from the use of devm_kzalloc() for allocating the encoder's internal structure, which is automatically freed during component unbinding. However, drm_encoder_cleanup() accessed this structure after it was freed, causing a use-after-free condition. The resolution was to switch the allocation to drmm_kzalloc(), a DRM-managed allocation that ensures the encoder structure remains accessible during cleanup and prevents use-after-free.

This use-after-free vulnerability could lead to undefined behavior, including potential kernel crashes or memory corruption, if the freed encoder structure is accessed. No known exploits in the wild have been reported. The impact is limited to the Rockchip DRM driver within the Linux kernel.

A fix has been implemented by switching from device-managed allocation (devm_kzalloc) to DRM-managed allocation (drmm_kzalloc) for the encoder's internal structure. Users should update to the Linux kernel version containing this fix once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel mailing lists for the official patch and update guidance.