CVE-2026-80685
Description
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 for order-1 folios in snapshot_page() snapshot_page() currently reads __page_2 after checking nr_pages > 1, but it should only do so when nr_pages > 2. If an order-1 folio is allocated at the end of a vmemmap section, __page_2 will not exist and reading it will cause a fault. During DLPAR memory remove on a 22 TB ppc64le LPAR, snapshot_page() oopsed on the page isolation path while reading an order-1 folio's __page_2 from an adjacent absent section (unmapped vmemmap). Fix this to avoid reading memmap that doesn't exist (e.g., a vmemmap hole).
How to fix
- Linux Linux9668ffe0e2a5e2399dce281620198a2e415871fc, c649324571206a30949765320b91ccdb4c1722dc, 7441d6348c70738e9ed307510db171c7a9b3f4bf, 6.13 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 31a31da8a6187f1e5448ec73222e01d7d3fed4aa ≤ v < 9668ffe0e2a5e2399dce281620198a2e415871fc, 31a31da8a6187f1e5448ec73222e01d7d3fed4aa ≤ v < c649324571206a30949765320b91ccdb4c1722dc, 31a31da8a6187f1e5448ec73222e01d7d3fed4aa ≤ v < 7441d6348c70738e9ed307510db171c7a9b3f4bf, 4117738bd42c8ab58090729daf0f8472a936f662, 6.12.111 ≤ v < 6.13, 6.15 | 9668ffe0e2a5e2399dce281620198a2e415871fc, c649324571206a30949765320b91ccdb4c1722dc, 7441d6348c70738e9ed307510db171c7a9b3f4bf, 6.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.