PT-2025-51592 · Linux+3 · Linux Kernel+3

Published 2025-10-30 · Updated 2026-05-07 · CVE-2025-68179

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where enabling Huge Virtual Objects (HVO) on the s390 architecture can lead to reproducible crashes. This occurs because kernel page tables are modified without flushing corresponding Translation Lookaside Buffer (TLB) entries. The s390 architecture requires an invalidation step when replacing valid page table entries, which the current HVO code does not support. A direct replacement of valid entries can cause random crashes or data corruption. The issue is addressed by disabling the ARCH WANT OPTIMIZE HUGETLB VMEMMAP option, effectively reverting a previous patch that enabled it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

BDU:2026-03146

CVE-2025-68179

MGASA-2026-0017

MGASA-2026-0018

RHSA-2025:6966

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8165-1

USN-8261-1

Affected Products

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 1580

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68179.json · Exploit
• https://ubuntu.com/security/CVE-2025-38582 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38020 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39869 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40308 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68259 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37831 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39985 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68787 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40337 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37763 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40226 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37800 · Vendor Advisory