The Linux kernel’s DRM pagemap code may call drm_pagemap_migrate_unmap_pages() after drm_pagemap_migration_unlock_put_pages() has cleared the pages array. Because the array is no longer valid, the DMA unmap operation can be performed on stale or freed page data, potentially corrupting kernel memory.

All Linux kernel releases that contain the DRM pagemap module and have not yet incorporated the upstream patch. The advisory does not list specific version numbers, so any kernel version executing this code prior to the commit should be regarded as susceptible.

The vulnerability has a CVSS score of 8.8, indicating high severity, and an EPSS score of 0.0012 (< 1%), implying a very low but non‑zero likelihood of exploitation. The issue is not listed in CISA’s KEV catalog. The advisory does not describe exploitation conditions or the need for privileged access. The most likely impact is kernel memory corruption should the affected sequence of function calls be triggered, potentially leading to system instability or crashes.