Home

Description

In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around vmap/vunmap Acquire and release the GEM object's reservation lock around vmap and vunmap operations. The tests use vmap_locked, which led to errors such as show below. [ 122.292030] WARNING: CPU: 3 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:390 drm_gem_shmem_vmap_locked+0x3a3/0x6f0 [ 122.468066] WARNING: CPU: 3 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:293 drm_gem_shmem_pin_locked+0x1fe/0x350 [ 122.563504] WARNING: CPU: 3 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:234 drm_gem_shmem_get_pages_locked+0x23c/0x370 [ 122.662248] WARNING: CPU: 2 PID: 1413 at drivers/gpu/drm/drm_gem_shmem_helper.c:452 drm_gem_shmem_vunmap_locked+0x101/0x330 Only export the new vmap/vunmap helpers for Kunit tests. These are not interfaces for regular drivers.

PUBLISHED Reserved 2026-05-08 | Published 2026-05-08 | Updated 2026-05-08 | Assigner Linux

Product status

Default status
unaffected

954907f7147dc43e0d1cd4d430c21d143d5fdf55 (git) before 6b953d92f2f29e74b125617c6f00300fa1bed97e
affected

954907f7147dc43e0d1cd4d430c21d143d5fdf55 (git) before e7b7022f11d3cf281c726117478696b83681bf11
affected

954907f7147dc43e0d1cd4d430c21d143d5fdf55 (git) before cda83b099f117f2a28a77bf467af934cb39e49cf
affected

Default status
affected

6.16
affected

Any version before 6.16
unaffected

6.18.16 (semver)
unaffected

6.19.6 (semver)
unaffected

7.0 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/6b953d92f2f29e74b125617c6f00300fa1bed97e

git.kernel.org/...c/e7b7022f11d3cf281c726117478696b83681bf11

git.kernel.org/...c/cda83b099f117f2a28a77bf467af934cb39e49cf

cve.org (CVE-2025-71301)

nvd.nist.gov (CVE-2025-71301)

Download JSON