An unbalanced lock in the Linux kernel GPU SVM module creates a critical risk of denial of service or system compromise.

This vulnerability involves an unbalanced lock and unlock sequence regarding the gpusvm notifier lock. The issue allows a local authenticated user (PR:L) to trigger a state where the kernel may hang or enter an inconsistent state, potentially leading to unauthorized memory access or system failure.

The ability for a local user to cause a kernel-level failure or memory inconsistency carries a high risk of service disruption and potential elevation of privilege. With a CVSS score of 8.8, this flaw necessitates urgent attention, particularly in multi-user or containerized environments where local access is granted to untrusted entities.

Immediate Action: Apply the latest kernel security updates provided by your Linux distribution, specifically ensuring the kernel is updated to at least version 7.0.10.

Proactive Monitoring: Review system audit logs for repeated segmentation faults or kernel warnings associated with GPU drivers or memory management operations.

Compensating Controls: Restrict local access to the system for untrusted users to prevent the initiation of malicious processes that could leverage this vulnerability.

Public Exploit Available: exploit_available (unknown)

Maintaining kernel integrity is essential for system security. Given the high severity of this lock-related flaw, organizations should move to implement the relevant patches as soon as they are made available by their upstream kernel maintainers or distribution vendors.