CVE-2025-22000: mm/huge_memory: drop beyond-EOF folios with the right number of refs
In the Linux kernel, the following vulnerability has been resolved:
mm/hugememory: drop beyond-EOF folios with the right number of refs
When an after-split folio is large and needs to be dropped due to EOF, folioputrefs(folio, folionrpages(folio)) should be used to drop all page cache refs. Otherwise, the folio will not be freed, causing memory leak.
This leak would happen on a filesystem with blocksize > pagesize and a truncate is performed, where the blocksize makes folios split to >0 order ones, causing truncated folios not being freed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22000?
CVE-2025-22000 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-22000?
To fix CVE-2025-22000, upgrade to the latest version of the Linux kernel where the vulnerability has been resolved.
What versions of the Linux kernel are affected by CVE-2025-22000?
CVE-2025-22000 affects specific versions of the Linux kernel, particularly those prior to the patch release addressing this vulnerability.
What does CVE-2025-22000 impact?
CVE-2025-22000 impacts memory management by incorrectly handling large folios after split operations, potentially leading to resource misuse.
Is CVE-2025-22000 a remote or local vulnerability?
CVE-2025-22000 is considered a local vulnerability as it requires local access to exploit the memory management flaw.