Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38195

LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() ERROR INFO: CPU 25 Unable to handle kernel paging request at virtual address 0x0 ... Call Trace: [<900000000023c30c>] huge_pte_offset+0x3c/0x58 [<900000000057fd4c>] hugetlb_follow_page_mask+0x74/0x438 [<900000000051fee8>] __get_user_pages+0xe0/0x4c8 [<9000000000522414>] faultin_page_range+0x84/0x380 [<9000000000564e8c>] madvise_vma_behavior+0x534/0xa48 [<900000000056689c>] do_madvise+0x1bc/0x3e8 [<9000000000566df4>] sys_madvise+0x24/0x38 [<90000000015b9e88>] do_syscall+0x78/0x98 [<9000000000221f18>] handle_syscall+0xb8/0x158 In some cases, pmd may be NULL and rely on NULL as the return value for processing, so it is necessary to determine this situation here.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 34256805720993e37adf6127371a1265aea8376a to < 55a9a7d21309bbea1dd629cf28396521a2803bb3affected
  • 2ca9380b12711afe95b3589bd82b59623b3c96b3 to < b427d98d55217b53c88643579fbbd8a4c351a105affected
  • 51424fd171cee6a33f01f7c66b8eb23ac42289d4 to < 985f086f281b7bbb6644851e63af1a17ffff9277affected
  • bd51834d1cf65a2c801295d230c220aeebf87a73 to < b5c7397b7fd125203c60b59860c168ee92291272affected
  • bd51834d1cf65a2c801295d230c220aeebf87a73 to < ee084fa96123ede8b0563a1b5a9b23adc43cd50daffected
  • b49f085cd671addbda4802d6b9382513f7dd0f30affected
  • 6.1.136 to < 6.1.191affected
  • 6.6.89 to < 6.6.95affected
  • 6.12.26 to < 6.12.35affected
  • 6.14.5 to < 6.15affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.95 to ≤ 6.6.*unaffected
  • 6.12.35 to ≤ 6.12.*unaffected
  • 6.15.4 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References