Riskcovery

CVE-2026-74420

drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges

VMAs marked with VM_IO or VM_PFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, get_pages() relies on hmm_range_fault() to resolve struct pages for the target range.

Attempting to create an SVM range on such VMAs results in repeated get_pages() failures and can lead to an infinite loop inside a driver’s page‑fault handler. Prevent this by rejecting ranges on VM_IO or VM_PFNMAP VMAs and returning -EIO.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 99624bdff8670795b678eafa6509aaad3a5c0175 to before 353f26c74660bcbd8d82cd76622748e14a5a5db3Affected
  • 99624bdff8670795b678eafa6509aaad3a5c0175 to before 63f443384979563f16f70420f4fa85bba31238caAffected
  • 99624bdff8670795b678eafa6509aaad3a5c0175 to before b82a225e57a334335a21462b75ee2223bc6efe6dAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.