The Linux kernel flaw prevents creation of GPU SVM ranges on memory areas marked VM_IO or VM_PFNMAP, because those ranges are not backed by struct page objects. The driver’s page‑fault routine get_pages() repeatedly fails to resolve pages and can enter an endless loop. This results in a loss of service for any application using the affected GPU driver as the device becomes unresponsive.

Any Linux system that runs the Linux kernel with the GPUSVM driver enabled may be affected. The vulnerability exists in kernel code prior to the commit that adds a check against VM_IO and VM_PFNMAP VMAs; the exact version range is not specified but applies to versions before that change.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of <1% suggests a low likelihood of exploitation. The vulnerability is not in the CISA KEV catalog. An attacker would likely need local privileges to load the GPUSVM driver or to request SVM operations from an application; this is an inferred attack vector, not directly stated in the description. If triggered, the driver can enter an infinite loop, leading to resource exhaustion or a system halt. No public exploits are reported.