CVE-2025-39700: mm/damon/ops-common: ignore migration request to invalid nodes
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/ops-common: ignore migration request to invalid nodes
damonmigratepages() tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOSMIGRATE{HOT,COLD} action, the below kernel BUG can happen.
[ 7831.883495] BUG: unable to handle page fault for address: 0000000000001f48 [ 7831.884160] #PF: supervisor read access in kernel mode [ 7831.884681] #PF: errorcode(0x0000) - not-present page [ 7831.885203] PGD 0 P4D 0 [ 7831.885468] Oops: Oops: 0000 [#1] SMP PTI [ 7831.885852] CPU: 31 UID: 0 PID: 94202 Comm: kdamond.0 Not tainted 6.16.0-rc5-mm-new-damon+ #93 PREEMPT(voluntary) [ 7831.886913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-4.el9 04/01/2014 [ 7831.887777] RIP: 0010:allocfrozenpagesnoprof (include/linux/mmzone.h:1724 include/linux/mmzone.h:1750 mm/pagealloc.c:4936 mm/pagealloc.c:5137) [...] [ 7831.895953] Call Trace: [ 7831.896195] <TASK> [ 7831.896397] folioallocnoprof (mm/pagealloc.c:5183 mm/pagealloc.c:5192) [ 7831.896787] migratepagesbatch (mm/migrate.c:1189 mm/migrate.c:1851) [ 7831.897228] ? pfxallocmigrationtarget (mm/migrate.c:2137) [ 7831.897735] migratepages (mm/migrate.c:2078) [ 7831.898141] ? pfxallocmigrationtarget (mm/migrate.c:2137) [ 7831.898664] damonmigratefoliolist (mm/damon/ops-common.c:321 mm/damon/ops-common.c:354) [ 7831.899140] damonmigratepages (mm/damon/ops-common.c:405) [...]
Add a target node validity check in damonmigratepages(). The validity check is stolen from that of dopagesmove(), which is being used for the movepages() system call.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39700?
CVE-2025-39700 has a severity rating that indicates it can lead to potential security risks in the Linux kernel.
How do I fix CVE-2025-39700?
To fix CVE-2025-39700, ensure you update to the latest version of the Linux kernel that addresses this vulnerability.
What versions of the Linux kernel are affected by CVE-2025-39700?
CVE-2025-39700 affects certain versions of the Linux kernel, particularly those prior to the fix being released.
What are the implications of CVE-2025-39700?
The implications of CVE-2025-39700 include potential system instability and incorrect handling of memory migration requests.
Is there a workaround for CVE-2025-39700?
Currently, there are no specific workarounds for CVE-2025-39700, and updating the kernel is recommended.