PT-2025-46628 · Linux+3 · Linux Kernel+3
Published
2025-08-29
·
Updated
2026-05-07
·
CVE-2025-40153
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.17-rc7
Description
The Linux kernel may experience a soft lockup when calling the
mprotect() function on a large hugetlb memory area (approximately 300GB in observed customer workloads). This issue occurs because the processing within the loop can take a significant amount of time, potentially triggering a soft lockup. The problem is not specific to Memory Tagging Extension (MTE) and can be triggered by other long-running processes within the loop. The mprotect() function, used for changing memory protection, is involved in this issue. The hugetlb change protection() and change protection() functions are also implicated in the call trace. The cond resched() function is missing for hugetlb, which is present in other memory management mechanisms like Transparent Huge Pages (THP) and base pages, leading to the lockup.Recommendations
Update to a version later than 6.17-rc7.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu