CVE-2026-74420

Received Received - Intake

GPUSVM Range Creation Fails on VM_IO or VM_PFNMAP VMAs

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges VMAs marked with VM_IO or VM_PFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, get_pages() relies on hmm_range_fault() to resolve struct pages for the target range. Attempting to create an SVM range on such VMAs results in repeated get_pages() failures and can lead to an infinite loop inside a driver’s page‑fault handler. Prevent this by rejecting ranges on VM_IO or VM_PFNMAP VMAs and returning -EIO.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74420

EUVD

EUVD-2026-59567

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves GPUSVM incorrectly handling VMAs marked with VM_IO or VM_PFNMAP. These VMAs lack struct page objects, which GPUSVM requires. Attempting to create an SVM range on such VMAs causes repeated failures in get_pages(), leading to an infinite loop in a driver's page-fault handler. The fix rejects these ranges and returns an error (-EIO).

Detection Guidance

This vulnerability is specific to the Linux kernel's GPU SVM (Shared Virtual Memory) functionality. Detection requires checking kernel logs for GPU-related errors or infinite loops in page-fault handlers. Monitor dmesg or system logs for messages indicating SVM range creation failures or get_pages() errors. No direct network detection is applicable.

Impact Analysis

If exploited, this flaw could cause system instability or crashes due to infinite loops in the page-fault handler. It may also disrupt GPU memory management, leading to application hangs or performance issues. Systems using GPUSVM with affected VMAs are at risk.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to GPU SVM (Shared Virtual Memory) handling, which could cause system instability or crashes but does not involve data breaches or unauthorized access.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Avoid using GPU SVM features with VMAs marked VM_IO or VM_PFNMAP. Review GPU driver configurations to ensure compatibility with the patched kernel.

Hi! I’m here to help you understand CVE-2026-74420. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70