Skip to main content
← All vulnerabilities
CVE-2025-38195

LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.1.191, 6.6.95, 6.12.35, 6.15, 6.15.4
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() ERROR INFO: CPU 25 Unable to handle kernel paging request at virtual address 0x0 ... Call Trace: [<900000000023c30c>] huge_pte_offset+0x3c/0x58 [<900000000057fd4c>] hugetlb_follow_page_mask+0x74/0x438 [<900000000051fee8>] __get_user_pages+0xe0/0x4c8 [<9000000000522414>] faultin_page_range+0x84/0x380 [<9000000000564e8c>] madvise_vma_behavior+0x534/0xa48 [<900000000056689c>] do_madvise+0x1bc/0x3e8 [<9000000000566df4>] sys_madvise+0x24/0x38 [<90000000015b9e88>] do_syscall+0x78/0x98 [<9000000000221f18>] handle_syscall+0xb8/0x158 In some cases, pmd may be NULL and rely on NULL as the return value for processing, so it is necessary to determine this situation here.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 6.1.136 · fixed in 6.1.191; From 6.6.89 · fixed in 6.6.95; From 6.12.26 · fixed in 6.12.35; From 6.14.5 · fixed in 6.15

  • Linux Linux

    6.15

  • KernelLinux

    fixed in 6.6.95; From 6.7.0 · fixed in 6.12.35; From 6.13.0 · fixed in 6.15.4

References 5

git.kernel.org