A high-severity memory management vulnerability in the Linux kernel could allow a local authenticated attacker to trigger a system crash or potentially manipulate kernel memory.

This flaw exists in the memory management subsystem, specifically within queue_folios_pmd. An attacker with local access can trigger the issue by performing memory operations like mbind or migrate_pages on ranges containing device-private page table entries, which the kernel incorrectly handles as hardware pointers.

The vulnerability carries a CVSS score of 7.8, indicating a high risk to system availability and integrity. A successful exploit can lead to a kernel oops or a VM_BUG_ON condition, resulting in an immediate denial of service for the affected host. In virtualized or multi-tenant environments, this could potentially lead to cross-process memory instability or unauthorized data access.

Immediate Action: Update the Linux kernel to version 7.2.4 or later, which contains the necessary patches to correctly skip non-present PMDs.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unexpected VM_BUG_ON entries that correlate with memory-intensive applications or GPU-backed workloads.

Compensating Controls: Restrict access to sensitive memory-management system calls for untrusted local users if immediate patching is not feasible. Ensure that workloads utilizing HMM-based GPU drivers are isolated and properly audited.

Public Exploit Available: No — exploit_available (unknown).

Given the potential for system-wide instability and the high CVSS severity, organizations should prioritize testing and deploying the upstream kernel patches. Administrators should verify their current kernel version and apply the 7.2.4 update or the relevant stable backport to eliminate this risk to kernel stability and integrity.