PT-2025-37213 · Linux+2 · Linux Kernel+2

Published 2025-09-11 · Updated 2026-04-20 · CVE-2025-39754

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A race condition exists between smaps hugetlb range() and page migration within the kernel’s memory management subsystem. Specifically, smaps hugetlb range() accesses page table entries (pte) without holding the page table lock (ptl), potentially leading to a BUG ON error in pfn swap entry to page() during concurrent page migration. The issue arises from the interaction between huge ptep get() in smaps hugetlb range() and remove migration ptes() during migration, specifically after folio unlock().

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

AZL-67175

AZL-70952

CVE-2025-39754

ECHO-58F1-184E-4081

OESA-2025-2409

OESA-2025-2410

OESA-2025-2411

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03600-1

SUSE-SU-2025:03601-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3725-1

SUSE-SU-2025:3751-1

Affected Products

Debian

Linux Kernel

Suse

References · 1979

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39754.json · Exploit
• https://osv.dev/vulnerability/AZL-67175 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03601-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39754 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03634-1 · Vendor Advisory
• https://git.kernel.org/stable/c/45d19b4b6c2d422771c29b83462d84afcbb33f01 · Patch
• https://osv.dev/vulnerability/OESA-2025-2409 · Vendor Advisory
• https://git.kernel.org/stable/c/09fc018f48871123ad5dbd7b03c956580232ed76 · Patch
• https://osv.dev/vulnerability/OESA-2025-2410 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21179-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-39754 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3751-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3725-1 · Vendor Advisory