PT-2025-49057 · Linux+2 · Linux Kernel+2
CVE-2025-40230
·
Publicado
2025-10-11
·
Atualizado
2026-03-25
CVSS v2.0
5.4
Média
| Vetor | AV:N/AC:H/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to Transparent Huge Pages (THP). When memory error injection occurs on a THP mapped to userspace, the kernel can panic instead of terminating the affected process. This occurs because splitting the THP involves reading pages, which can trigger a second machine check exception within the kernel, leading to a kernel panic. The issue arises from attempting to map the poisoned THP to a zeropage during the splitting process, causing a re-access of pages in the hardware-poisoned THP within the kernel. The fix prevents accessing the poisoned page during zeropage identification, while continuing to scan unaffected pages.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linuxmint
Linux Kernel
Ubuntu