Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success path. If a later page failed (e.g. -EOPNOTSUPP when ctx->allow_mixed is false) and jumped to err_unmap, svm_pages->dpagemap was still NULL, so __drm_gpusvm_unmap_pages() skipped device_unmap() and leaked the device mappings already created. Assign svm_pages->dpagemap when the first device page is mapped so the err_unmap path can device_unmap() those mappings. This issue was found by Sashiko AI review.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 before e8362523fd1b61712f7d996802f9b5dee545c7e6; affected f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 before 72e4fca5529e45b5beebad79d804de442f632324; affected f70da6f99d4f40c5f481c92e3b65d5e36eaa6dc9 before 7f708f51e3955bda0d77a0b67ab9bea6c97fea99 |
| Linux / Linux | affected 6.18; unaffected 0 before 6.18; unaffected 6.18.44 through 6.18.*; unaffected 7.1.6 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e8362523fd1b61712f7d996802f9b5dee545c7e6
- https://git.kernel.org/stable/c/72e4fca5529e45b5beebad79d804de442f632324
- https://git.kernel.org/stable/c/7f708f51e3955bda0d77a0b67ab9bea6c97fea99
ADP enrichment
No English description supplied.
No references supplied.