Linux Kernel Huge Page Handling Vulnerability in DRM GPU SVM

Vulnerability

A vulnerability in the Linux kernel's handling of huge pages within the Direct Rendering Manager (DRM) GPU Shared Virtual Memory (SVM) subsystem has been addressed. The issue arose because the HMM (Heterogeneous Memory Management) range could partially cover a huge page, such as 2M, leading to potential memory mapping errors. This could result in mapping memory outside the intended range, possibly involving unmapped areas by the memory manager. The vulnerability has been fixed by aligning the GPU SVM code with the user pointer handling in the XE driver, ensuring correct management of huge pages and memory ranges.

Impact

The vulnerability could have led to incorrect memory mappings, potentially causing memory access violations or instability in systems using GPU SVM.

Added: Dec 9, 2025, 8:24 PM
Updated: Dec 9, 2025, 8:24 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
7.7
relevance
1.4
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.