Executive brief
A vulnerability was identified in the Linux kernel's graphics memory management system (TTM). Under specific conditions where memory shrinking fails, the system could enter an infinite loop while trying to manage memory resources. This could lead to a system hang or denial of service, impacting the availability of the affected machine.
Technical details
A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) Video Memory Management (TTM) subsystem stems from an incorrect handling of Least Recently Used (LRU) lists. Specifically, in the ttm_bo_shrink() function, if a backup operation fails, the system may enter an infinite LRU walk. The fix involves reordering the bulk move deletion to occur only after a successful backup and utilizing ttm_resource_del_bulk_move_unevictable() to ensure the resource is correctly marked. This issue is reachable locally and can result in a kernel hang (Denial of Service). Patches have been merged into stable branches including 6.15.y and 7.1+.
Affected products
- Linux Linux Kernel v6.15 to v7.0.10
Timeline
- 2026-05-11: other: Initial patch authored
- 2026-06-24: disclosed: CVE published
- 2026-06-24: advisory: NVD record created