Description
In the Linux kernel, the following vulnerability has been resolved:

drm/tests: shmem: Hold reservation lock around purge

Acquire and release the GEM object's reservation lock around calls
to the object's purge operation. The tests use
drm_gem_shmem_purge_locked(), which led to errors such as show below.

[ 58.709128] WARNING: CPU: 1 PID: 1354 at drivers/gpu/drm/drm_gem_shmem_helper.c:515 drm_gem_shmem_purge_locked+0x51c/0x740

Only export the new helper drm_gem_shmem_purge() for Kunit tests.
This is not an interface for regular drivers.
Published: 2026-05-08
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A bug in the Linux kernel’s DRM test suite caused calls to the purge operation without holding the necessary reservation lock. This race fault triggers warning messages during Kunit test execution and is classified as a CWE‑413 weakness (Race Condition). The flaw does not provide any operational impact to regular drivers or end users, as it is confined to test code that is not exported for production use.

Affected Systems

The issue affects the Linux kernel’s DRM subsystem test suite, specifically the shmem purge helper used in Kunit tests. Only development or continuous‑integration environments that run these tests are directly impacted; normal production kernels remain unaffected.

Risk and Exploitability

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a very low likelihood of exploitation. Because the flaw only manifests in the test framework and requires privileged kernel modification to trigger, the overall risk to typical users is negligible. No known attack path exists for surface‑level exploitation.

Generated by OpenCVE AI on May 14, 2026 at 20:53 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update to a kernel release that contains the patch referenced in commit 3f41307d589c2f25d556d47b165df808124cd0c4.
  • Configure the build to exclude the old shmem purge helper by using the new drm_gem_shmem_purge() helper or by disabling the Kunit test that exercised it.
  • Review and monitor kernel test logs for warnings similar to the one shown, ensuring that no regressions re‑introduce the failure.

Generated by OpenCVE AI on May 14, 2026 at 20:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 14 May 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo

Sat, 09 May 2026 03:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Sat, 09 May 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-413
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Fri, 08 May 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Fri, 08 May 2026 13:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around purge Acquire and release the GEM object's reservation lock around calls to the object's purge operation. The tests use drm_gem_shmem_purge_locked(), which led to errors such as show below. [ 58.709128] WARNING: CPU: 1 PID: 1354 at drivers/gpu/drm/drm_gem_shmem_helper.c:515 drm_gem_shmem_purge_locked+0x51c/0x740 Only export the new helper drm_gem_shmem_purge() for Kunit tests. This is not an interface for regular drivers.
Title drm/tests: shmem: Hold reservation lock around purge
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-11T21:57:27.350Z

Reserved: 2026-05-06T11:31:45.510Z

Link: CVE-2025-71296

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-05-08T14:16:30.887

Modified: 2026-05-14T19:21:57.783

Link: CVE-2025-71296

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-05-08T00:00:00Z

Links: CVE-2025-71296 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-14T21:00:13Z

Weaknesses