Linux Kernel CVE-2026-52949

TTM (Translation Table Maps) is the GPU buffer object memory manager used by the Linux DRM (Direct Rendering Manager) subsystem, relied upon by drivers such as amdgpu, nouveau, and i915. When system memory pressure occurs, ttm_bo_shrink() is invoked to back up GPU buffer objects to system RAM. The bug is a logic ordering error: ttm_resource_del_bulk_move_unevictable() (which removes a buffer object from bulk move tracking and marks it unevictable) was called before the backup succeeded. On backup failure, this leaves the LRU list in an inconsistent state, causing the kernel to loop indefinitely over it. This mirrors an identical defect fixed in ttm_bo_swapout() by upstream commit b2ed01e7ad. The CPE data (cpe:2.3:a:linux:linux) covers the Linux kernel broadly; affected kernel versions include 6.15 and stable branches between commit 70d645deac98303d1bf9ab08a4e68da52bf8c1e1 and the respective fix commits. No CWE is formally assigned, but the root cause aligns with CWE-835 (Loop with Unreachable Exit Condition) arising from a state management defect.