Linux Kernel GEM Reservation Lock Vulnerability in DRM Shmem Handling

Vulnerability

A vulnerability has been addressed in the Linux kernel's handling of Graphics Execution Manager (GEM) objects within the Direct Rendering Manager (DRM) subsystem. The issue arose because the reservation lock for GEM objects was not properly managed during 'madvise' operations, leading to potential errors in the Kunit test environment. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability could lead to improper management of memory advice operations for GEM objects, potentially causing synchronization issues or test failures.

Reproduction

The vulnerability can be reproduced by running Kunit tests that utilize the 'drm_gem_shmem_madvise_locked' function. This will trigger a warning indicating that the reservation lock was not properly handled, demonstrating the issue.

Remediation

The vulnerability has been fixed by modifying the 'drm_gem_shmem_madvise' function to correctly acquire and release the reservation lock around 'madvise' operations. Users can apply the latest patches available in the Linux kernel stable tree to address this issue.

Added: May 8, 2026, 5:41 PM
Updated: May 8, 2026, 5:41 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
7.8
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.