CVE-2025-40336

A flaw was found in the Linux kernel's GPU shared virtual memory (gpusvm) subsystem. When handling HMM (Heterogeneous Memory Management) ranges that partially cover a huge page (such as 2MB pages), the hmm_pfn_to_map_order() function may incorrectly map memory outside the intended range. This could result in mapping memory that is not mapped by the process's memory management, potentially exposing unauthorized memory regions or causing memory corruption.

This vulnerability affects systems using GPU drivers that utilize the gpusvm subsystem for shared virtual memory between CPU and GPU. Exploitation requires local access and the ability to use GPU memory mapping features. The impact includes potential information disclosure or memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.