The Linux kernel security community disclosed CVE-2025-40336, a vulnerability in the DRM gpusvm code that mishandles hmm_pfn_to_map_order when an HMM range partially covers a huge page; the bug could allow the kernel to map memory outside the intended range (and potentially outside the process’s...