Linux Kernel Vulnerability in GPUSVM Handling Affecting Multiple Products

CVE-2026-74420

What is CVE-2026-74420?

A vulnerability in the Linux kernel's GPUSVM handling mechanism exists where VM Areas (VMAs) marked with VM_IO or VM_PFNMAP result in failures during page resolution. This occurs because these VMAs are not backed by struct page objects, which are necessary for the GPUSVM to function accurately. The failure in the get_pages() function can trigger an infinite loop inside the driver’s page-fault handler, potentially leading to system instability. To mitigate this issue, the vulnerability provides a safeguard by rejecting the creation of SVM ranges on unsupported VMAs, ensuring that an error is returned instead of allowing the problematic operations.

References