PT-2025-49032 · Linux+2 · Linux Kernel+2

Published

2025-09-29

·

Updated

2026-05-07

·

CVE-2025-40218

CVSS v2.0

3.7

Low

VectorAV:L/AC:H/Au:M/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel’s DAMON virtual address space operation set implementation (vaddr) contains a flaw related to the pte offset map lock() function within the page table walk callback. Repeated calls to pte offset map lock() can occur if the target is a pmd migration entry, potentially leading to an infinite page table walk and a soft lockup, particularly when CPU hotplugging and DAMON are running concurrently. The issue arises because DAMON promises only best-effort accuracy, and missing access to pages during the walk does not pose a problem.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Weakness Enumeration

Related Identifiers

BDU:2026-02787
CVE-2025-40218
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8165-1
USN-8261-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu