PT-2025-16730 · Linux+6 · Linux Kernel+6
Published
2025-03-25
·
Updated
2026-04-20
·
CVE-2025-22090
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.12.0-rc5+
Description
A vulnerability in the Linux kernel has been resolved, related to the handling of VM PAT when
fork() fails in copy page range(). If track pfn copy() fails, the dst VMA is added to the maple tree, but as fork() fails, the cleanup of the maple tree stumbles over the dst VMA for which no reservation or page table copy was performed. This leads to untrack pfn() trying to obtain PAT information from the page table, which fails because the page table was not copied. The issue is fixed by setting the VM PAT flag only if the reservation succeeds and undoing the reservation if anything goes wrong while copying the page tables.Recommendations
For Linux kernel versions prior to 6.12.0-rc5+, update to a newer version that includes the fix for the VM PAT handling issue.
As a temporary workaround, consider disabling the
fork() system call in scenarios where copy page range() may fail, until a patch is available.
Restrict access to the copy page range() function to minimize the risk of exploitation.Exploit
Fix
Improper Access Control
Incorrect Privilege Assignment
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu