CVE-2026-52949: drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure
In the Linux kernel, the following vulnerability has been resolved:
drm/ttm: Fix ttmboshrink() infinite LRU walk on backup failure
Apply the same fix as b2ed01e7ad ("drm/ttm: Fix ttmboswapout() infinite LRU walk on swapout failure") to the ttmboshrink() path.
Move delbulkmove from before the backup to after success only, using ttmresourcedelbulkmoveunevictable() since the resource is now unevictable once fully backed up.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch b2ed01e7ad
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52949?
CVE-2026-52949 has a risk rating of 27.
How does CVE-2026-52949 affect the Linux kernel?
CVE-2026-52949 addresses an infinite LRU walk issue in the ttm_bo_shrink() function.
How do I fix CVE-2026-52949?
To fix CVE-2026-52949, update your Linux kernel to the latest patched version as recommended by your distribution.
What does the ttm_bo_shrink() function do in relation to CVE-2026-52949?
The ttm_bo_shrink() function is responsible for managing memory in the graphics subsystem but had issues leading to an infinite loop scenario.
Is CVE-2026-52949 a remote code execution vulnerability?
CVE-2026-52949 is not classified as a remote code execution vulnerability; it primarily affects internal memory management.