CVE-2026-63863

A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) Graphics Processing Unit Shared Virtual Memory (gpusvm) component. This vulnerability is caused by an unbalanced lock and unlock operation, which can lead to system instability. An attacker could potentially exploit this to trigger a denial of service, making the system unresponsive.

This vulnerability is rated as Moderate impact because exploitation requires local access and the resulting blast radius is restricted to a denial of service, with no compromise of data confidentiality or integrity. The issue stems from an improper lock release sequence within the Direct Rendering Manager (DRM) GPU shared virtual memory handling subsystem. Triggering this condition requires a local user to initiate memory management operations on hardware utilizing GPU SVM features. Standard enterprise environments that do not deploy compatible GPU hardware or SVM-dependent workloads are not exposed during normal operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.