CVE-2025-68293
Description
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix NULL pointer deference when splitting folio Commit c010d47f107f ("mm: thp: split huge page to any lower order pages") introduced an early check on the folio's order via mapping->flags before proceeding with the split work. This check introduced a bug: for shmem folios in the swap cache and truncated folios, the mapping pointer can be NULL. Accessing mapping->flags in this state leads directly to a NULL pointer dereference. This commit fixes the issue by moving the check for mapping != NULL before any attempt to access mapping->flags.
How to fix
- Linux Linux592db83615a9f0164472ec789c2ed34ad35f732f, d1b83fbacd4397a1d2f8c6b13427a8636ae2b307, cff47b9e39a6abf03dde5f4f156f841b0c54bba0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c010d47f107f609b9f4d6a103b6dfc53889049e9 ≤ v < 592db83615a9f0164472ec789c2ed34ad35f732f, c010d47f107f609b9f4d6a103b6dfc53889049e9 ≤ v < d1b83fbacd4397a1d2f8c6b13427a8636ae2b307, c010d47f107f609b9f4d6a103b6dfc53889049e9 ≤ v < cff47b9e39a6abf03dde5f4f156f841b0c54bba0, 6.9 | 592db83615a9f0164472ec789c2ed34ad35f732f, d1b83fbacd4397a1d2f8c6b13427a8636ae2b307, cff47b9e39a6abf03dde5f4f156f841b0c54bba0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.