CVE-2026-74420

A flaw was found in the Linux kernel's GPU Shared Virtual Memory (SVM) subsystem. This vulnerability occurs when attempting to create an SVM range on Virtual Memory Areas (VMAs) that are not backed by physical page objects. An attacker could exploit this by triggering repeated page retrieval failures, leading to an infinite loop within a driver's page-fault handler. This can result in a system-wide Denial of Service (DoS).

A moderate denial of service vulnerability was found in the Linux kernel GPU Shared Virtual Memory (SVM) subsystem (drm/gpusvm). Virtual memory areas (VMAs) marked VM_IO or VM_PFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. A local user with access to the DRM GPU interface can attempt to create an SVM range over such a VMA; the GPU page-fault path then repeatedly fails to resolve pages (get_pages()) and the driver's page-fault handler can enter an infinite loop, hanging the kernel and resulting in a system-wide denial of service. There is no impact to confidentiality or integrity; Red Hat assessed this flaw as moderate severity (CVSS 3.1 base score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). This flaw affects the kernel and kernel-rt components in Red Hat Enterprise Linux 9 (rhel-9.8.z, rhel-9.9) and Red Hat Enterprise Linux 10 (rhel-10.2.z, rhel-10.3), and the kernel and kernel-ivos-qualcomm components in Red Hat In-Vehicle OS 2 (rhivos-2.0, rhivos-2.1), where the vulnerable GPUSVM code is present. Red Hat Enterprise Linux 6, 7, and 8, and the rhel-9.2.0.z, rhel-9.4.z, rhel-9.6.z, and rhel-10.0.z streams are not affected because the vulnerable code is not present in those kernels. For the affected streams, the fix is currently deferred to a future update; the residual risk is a local denial of service on systems where untrusted local users have access to the GPU SVM interface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.