CVE-2025-40336
BaseFortify
Publication date: 2025-12-09
Last updated on: 2025-12-09
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's drm/gpusvm component involves improper handling in the function hmm_pfn_to_map_order(). Specifically, when the hmm range partially covers a huge page (such as a 2MB page), the code could incorrectly map memory outside the intended range, potentially mapping memory not even mapped by the memory manager. This could lead to unintended or unsafe memory mappings. The fix aligns the handling with the xe userptr code to prevent this issue.
How can this vulnerability impact me? :
The vulnerability could cause the system to map memory regions outside the intended range, which might lead to memory corruption, data leakage, or system instability. This could potentially be exploited to access unauthorized memory areas, leading to security risks or crashes.