PT-2025-35954 · Linux · Linux Kernel

Published

2025-09-04

·

Updated

2025-09-04

·

CVE-2025-38681

Report an issue

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

The Linux kernel contains a flaw in the `mm/ptdump` component where the code can race with concurrent modifications of kernel page tables. Specifically, when intermediate levels of kernel page tables are freed, the dump code may dereference bogus addresses, potentially leading to issues. This occurs during memory hot remove operations and when checking for pages marked with write and execute permissions via the `/sys/kernel/debug/kernel page tables/check wx pages` interface, which calls the `ptdump check wx()` function. The issue is addressed by moving the memory hotplug lock inside the generic `ptdump check wx()` function.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-38681

Affected Products

Linux Kernel