CVE-2025-39754: mm/smaps: fix race between smaps_hugetlb_range and migration
In the Linux kernel, the following vulnerability has been resolved:
mm/smaps: fix race between smapshugetlbrange and migration
smapshugetlbrange() handles the pte without holdling ptl, and may be concurrenct with migration, leaing to BUGON in pfnswapentrytopage(). The race is as follows.
smapshugetlbrange migratepages hugeptepget removemigrationptes foliounlock pfnswapentryfolio BUGON
To fix it, hold ptl lock in smapshugetlbrange().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Hold the ptl lock in smaps_hugetlb_range() while handling the huge-page PTE to prevent races with migration.
Linux kernel mm/smaps ptl lock in smaps_hugetlb_range() = held
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39754?
CVE-2025-39754 is classified as a high severity vulnerability due to its potential for causing serious system crashes.
How do I fix CVE-2025-39754?
To mitigate CVE-2025-39754, update your Linux kernel to the latest version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2025-39754?
CVE-2025-39754 affects various versions of the Linux kernel prior to the patch release addressing this issue.
What type of vulnerability is CVE-2025-39754?
CVE-2025-39754 is a race condition vulnerability that occurs during memory management operations in the Linux kernel.
What impact does CVE-2025-39754 have on system stability?
CVE-2025-39754 can lead to system instability, causing unexpected behavior and potential crashes when memory migration occurs.