PT-2025-35954 · Linux+5 · Linux Kernel+5
Published
2025-06-20
·
Updated
2026-04-20
·
CVE-2025-38681
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the
mm/ptdump component where the code can race with concurrent modifications of kernel page tables. Specifically, when intermediate levels of kernel page tables are freed, the dump code may dereference bogus addresses, potentially leading to issues. This occurs during memory hot remove operations and when checking for pages marked with write and execute permissions via the /sys/kernel/debug/kernel page tables/check wx pages interface, which calls the ptdump check wx() function. The issue is addressed by moving the memory hotplug lock inside the generic ptdump check wx() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu