CVE-2025-40336
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/12/2025
Last modified:
09/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/gpusvm: fix hmm_pfn_to_map_order() usage<br />
<br />
Handle the case where the hmm range partially covers a huge page (like<br />
2M), otherwise we can potentially end up doing something nasty like<br />
mapping memory which is outside the range, and maybe not even mapped by<br />
the mm. Fix is based on the xe userptr code, which in a future patch<br />
will directly use gpusvm, so needs alignment here.<br />
<br />
v2:<br />
- Add kernel-doc (Matt B)<br />
- s/fls/ilog2/ (Thomas)



