CVE-2025-39754
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
11/09/2025
Última modificación:
15/09/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mm/smaps: fix race between smaps_hugetlb_range and migration<br />
<br />
smaps_hugetlb_range() handles the pte without holdling ptl, and may be<br />
concurrenct with migration, leaing to BUG_ON in pfn_swap_entry_to_page(). <br />
The race is as follows.<br />
<br />
smaps_hugetlb_range migrate_pages<br />
huge_ptep_get<br />
remove_migration_ptes<br />
folio_unlock<br />
pfn_swap_entry_folio<br />
BUG_ON<br />
<br />
To fix it, hold ptl lock in smaps_hugetlb_range().