Memory Mapping Issue in Linux Kernel Affecting GPU Functionality

CVE-2025-40336

What is CVE-2025-40336?

A vulnerability in the Linux kernel related to dubious handling of memory mappings within the drm/gpusvm subsystem has been identified and resolved. Specifically, the function hmm_pfn_to_map_order() did not correctly handle scenarios where the memory range partially overlapped with huge pages, potentially leading to mapping of memory outside of the intended range. This flaw could compromise the integrity of GPU operations, posing a security risk. The fix ensures proper alignment and safeguards against unintended memory access, enhancing the overall security posture of users leveraging the Linux kernel for graphics processing tasks.

References