PT-2025-25824 · Linux+3 · Linux Kernel+3
Published
2025-05-24
·
Updated
2025-12-03
·
CVE-2025-38050
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.15.0-rc6-zp #41
Description
A kernel crash was observed due to a NULL pointer dereference when replacing free hugetlb folios. This issue arises from a potential race between
update and free hugetlb folio() and replace free hugepage folios(). When this race condition occurs, folio hstate(folio) returns a NULL pointer, and subsequent access to this NULL pointer causes the system to crash.Recommendations
To resolve this issue, ensure that
folio hstate(folio) is executed under the protection of the hugetlb lock lock, preventing it from returning a NULL pointer.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Ubuntu