CVE-2025-40336

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/12/2025
Last modified:
09/12/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/gpusvm: fix hmm_pfn_to_map_order() usage<br /> <br /> Handle the case where the hmm range partially covers a huge page (like<br /> 2M), otherwise we can potentially end up doing something nasty like<br /> mapping memory which is outside the range, and maybe not even mapped by<br /> the mm. Fix is based on the xe userptr code, which in a future patch<br /> will directly use gpusvm, so needs alignment here.<br /> <br /> v2:<br /> - Add kernel-doc (Matt B)<br /> - s/fls/ilog2/ (Thomas)

Impact