CVE - CVE-2025-38085

CVE-ID
CVE-2025-38085	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in which unrelated VMAs can afterwards be installed. If this happens in the middle of a concurrent gup_fast(), gup_fast() could end up walking the page tables of another process. While I don't see any way in which that immediately leads to kernel memory corruption, it is really weird and unexpected. Fix it with an explicit broadcast IPI through tlb_remove_table_sync_one(), just like we do in khugepaged when removing page tables for a THP collapse.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/034a52b5ef57c9c8225d94e9067f3390bb33922f URL:https://git.kernel.org/stable/c/034a52b5ef57c9c8225d94e9067f3390bb33922f MISC:https://git.kernel.org/stable/c/1013af4f585fccc4d3e5c5824d174de2257f7d6d URL:https://git.kernel.org/stable/c/1013af4f585fccc4d3e5c5824d174de2257f7d6d MISC:https://git.kernel.org/stable/c/952596b08c74e8fe9e2883d1dc8a8f54a37384ec URL:https://git.kernel.org/stable/c/952596b08c74e8fe9e2883d1dc8a8f54a37384ec MISC:https://git.kernel.org/stable/c/a3d864c901a300c295692d129159fc3001a56185 URL:https://git.kernel.org/stable/c/a3d864c901a300c295692d129159fc3001a56185 MISC:https://git.kernel.org/stable/c/a6bfeb97941a9187833b526bc6cc4ff5706d0ce9 URL:https://git.kernel.org/stable/c/a6bfeb97941a9187833b526bc6cc4ff5706d0ce9 MISC:https://git.kernel.org/stable/c/b7754d3aa7bf9f62218d096c0c8f6c13698fac8b URL:https://git.kernel.org/stable/c/b7754d3aa7bf9f62218d096c0c8f6c13698fac8b MISC:https://git.kernel.org/stable/c/fe684290418ef9ef76630072086ee530b92f02b8 URL:https://git.kernel.org/stable/c/fe684290418ef9ef76630072086ee530b92f02b8
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)