CVE-2025-38195 (GCVE-0-2025-38195)
Vulnerability from cvelistv5
Published
2025-07-04 13:37
Modified
2026-10-30 12:21
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() ERROR INFO: CPU 25 Unable to handle kernel paging request at virtual address 0x0 ... Call Trace: [<900000000023c30c>] huge_pte_offset+0x3c/0x58 [<900000000057fd4c>] hugetlb_follow_page_mask+0x74/0x438 [<900000000051fee8>] __get_user_pages+0xe0/0x4c8 [<9000000000522414>] faultin_page_range+0x84/0x380 [<9000000000564e8c>] madvise_vma_behavior+0x534/0xa48 [<900000000056689c>] do_madvise+0x1bc/0x3e8 [<9000000000566df4>] sys_madvise+0x24/0x38 [<90000000015b9e88>] do_syscall+0x78/0x98 [<9000000000221f18>] handle_syscall+0xb8/0x158 In some cases, pmd may be NULL and rely on NULL as the return value for processing, so it is necessary to determine this situation here.
References
Impacted products
Vendor Product Version
Linux Linux Version: 34256805720993e37adf6127371a1265aea8376a
Version: 2ca9380b12711afe95b3589bd82b59623b3c96b3
Version: 51424fd171cee6a33f01f7c66b8eb23ac42289d4
Version: bd51834d1cf65a2c801295d230c220aeebf87a73
Version: bd51834d1cf65a2c801295d230c220aeebf87a73
Version: b49f085cd671addbda4802d6b9382513f7dd0f30
Version: 6.1.136   ≤
Version: 6.6.89   ≤
Version: 6.12.26   ≤
Version: 6.14.5   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/loongarch/mm/hugetlbpage.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "55a9a7d21309bbea1dd629cf28396521a2803bb3",
              "status": "affected",
              "version": "34256805720993e37adf6127371a1265aea8376a",
              "versionType": "git"
            },
            {
              "lessThan": "b427d98d55217b53c88643579fbbd8a4c351a105",
              "status": "affected",
              "version": "2ca9380b12711afe95b3589bd82b59623b3c96b3",
              "versionType": "git"
            },
            {
              "lessThan": "985f086f281b7bbb6644851e63af1a17ffff9277",
              "status": "affected",
              "version": "51424fd171cee6a33f01f7c66b8eb23ac42289d4",
              "versionType": "git"
            },
            {
              "lessThan": "b5c7397b7fd125203c60b59860c168ee92291272",
              "status": "affected",
              "version": "bd51834d1cf65a2c801295d230c220aeebf87a73",
              "versionType": "git"
            },
            {
              "lessThan": "ee084fa96123ede8b0563a1b5a9b23adc43cd50d",
              "status": "affected",
              "version": "bd51834d1cf65a2c801295d230c220aeebf87a73",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b49f085cd671addbda4802d6b9382513f7dd0f30",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.191",
              "status": "affected",
              "version": "6.1.136",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.95",
              "status": "affected",
              "version": "6.6.89",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.35",
              "status": "affected",
              "version": "6.12.26",
              "versionType": "semver"
            },
            {
              "lessThan": "6.15",
              "status": "affected",
              "version": "6.14.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/loongarch/mm/hugetlbpage.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.191",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.95",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.191",
                  "versionStartIncluding": "6.1.136",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.95",
                  "versionStartIncluding": "6.6.89",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.35",
                  "versionStartIncluding": "6.12.26",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.4",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.14.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()\n\nERROR INFO:\n\nCPU 25 Unable to handle kernel paging request at virtual address 0x0\n         ...\n Call Trace:\n [\u003c900000000023c30c\u003e] huge_pte_offset+0x3c/0x58\n [\u003c900000000057fd4c\u003e] hugetlb_follow_page_mask+0x74/0x438\n [\u003c900000000051fee8\u003e] __get_user_pages+0xe0/0x4c8\n [\u003c9000000000522414\u003e] faultin_page_range+0x84/0x380\n [\u003c9000000000564e8c\u003e] madvise_vma_behavior+0x534/0xa48\n [\u003c900000000056689c\u003e] do_madvise+0x1bc/0x3e8\n [\u003c9000000000566df4\u003e] sys_madvise+0x24/0x38\n [\u003c90000000015b9e88\u003e] do_syscall+0x78/0x98\n [\u003c9000000000221f18\u003e] handle_syscall+0xb8/0x158\n\nIn some cases, pmd may be NULL and rely on NULL as the return value for\nprocessing, so it is necessary to determine this situation here."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T12:21:45.698Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/55a9a7d21309bbea1dd629cf28396521a2803bb3"
        },
        {
          "url": "https://git.kernel.org/stable/c/b427d98d55217b53c88643579fbbd8a4c351a105"
        },
        {
          "url": "https://git.kernel.org/stable/c/985f086f281b7bbb6644851e63af1a17ffff9277"
        },
        {
          "url": "https://git.kernel.org/stable/c/b5c7397b7fd125203c60b59860c168ee92291272"
        },
        {
          "url": "https://git.kernel.org/stable/c/ee084fa96123ede8b0563a1b5a9b23adc43cd50d"
        }
      ],
      "title": "LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38195",
    "datePublished": "2025-07-04T13:37:18.558Z",
    "dateReserved": "2025-04-16T04:51:23.993Z",
    "dateUpdated": "2026-10-30T12:21:45.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.