PT-2025-28869 · Linux+3 · Linux Kernel+3

Published 2025-07-09 · Updated 2026-05-22 · CVE-2025-38241

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-gf3021d9246bc-dirty #118

Description: The Linux kernel is susceptible to a softlockup issue within the mm/shmem and swap subsystems when handling large transparent hugepages (mTHP) during swapin operations. This can occur when readahead brings order 0 folios into the swap cache, conflicting with the allocation of mTHP folios, leading to a retry loop and system instability.

Recommendations: Linux kernel versions prior to 6.15.0-gf3021d9246bc-dirty #118 should be updated.

Exploit

Fix

Improper Locking

Allocation of Resources Without Limits

Weakness Enumeration

CWE-667

CWE-770

Related Identifiers

BDU:2025-13470

CVE-2025-38241

OESA-2026-2417

OESA-2026-2418

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 332

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38241.json · Exploit
• https://ubuntu.com/security/CVE-2025-38330 · Vendor Advisory
• https://git.kernel.org/stable/c/1283dfc1e0cd52cf525c2cb1b59a6f9183aab7ca · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23374 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37967 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37766 · Security Note
• https://ubuntu.com/security/CVE-2025-38365 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40062 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39756 · Security Note
• https://ubuntu.com/security/CVE-2025-38362 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39955 · Security Note
• https://ubuntu.com/security/CVE-2024-36350 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38385 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38191 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40078 · Security Note