CVE-2025-38195

LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

State: Published
Severity: Not scored
Published: Jul 4, 2025
Updated: Oct 30, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

ERROR INFO:

CPU 25 Unable to handle kernel paging request at virtual address 0x0 ... Call Trace: [<900000000023c30c>] huge_pte_offset+0x3c/0x58 [<900000000057fd4c>] hugetlb_follow_page_mask+0x74/0x438 [<900000000051fee8>] __get_user_pages+0xe0/0x4c8 [<9000000000522414>] faultin_page_range+0x84/0x380 [<9000000000564e8c>] madvise_vma_behavior+0x534/0xa48 [<900000000056689c>] do_madvise+0x1bc/0x3e8 [<9000000000566df4>] sys_madvise+0x24/0x38 [<90000000015b9e88>] do_syscall+0x78/0x98 [<9000000000221f18>] handle_syscall+0xb8/0x158

In some cases, pmd may be NULL and rely on NULL as the return value for processing, so it is necessary to determine this situation here.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	34256805720993e37adf6127371a1265aea8376a to before 55a9a7d21309bbea1dd629cf28396521a2803bb3Affected 2ca9380b12711afe95b3589bd82b59623b3c96b3 to before b427d98d55217b53c88643579fbbd8a4c351a105Affected 51424fd171cee6a33f01f7c66b8eb23ac42289d4 to before 985f086f281b7bbb6644851e63af1a17ffff9277Affected bd51834d1cf65a2c801295d230c220aeebf87a73 to before b5c7397b7fd125203c60b59860c168ee92291272Affected bd51834d1cf65a2c801295d230c220aeebf87a73 to before ee084fa96123ede8b0563a1b5a9b23adc43cd50dAffected b49f085cd671addbda4802d6b9382513f7dd0f30Affected 6.1.136 to before 6.1.191Affected 6.6.89 to before 6.6.95Affected 6.12.26 to before 6.12.35Affected 6.14.5 to before 6.15Affected
LinuxLinux	6.15Affected before 6.15Not affected 6.1.191 through 6.1.Not affected 6.6.95 through 6.6.Not affected 6.12.35 through 6.12.Not affected 6.15.4 through 6.15.Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

34256805720993e37adf6127371a1265aea8376a to before 55a9a7d21309bbea1dd629cf28396521a2803bb3Affected
2ca9380b12711afe95b3589bd82b59623b3c96b3 to before b427d98d55217b53c88643579fbbd8a4c351a105Affected
51424fd171cee6a33f01f7c66b8eb23ac42289d4 to before 985f086f281b7bbb6644851e63af1a17ffff9277Affected
bd51834d1cf65a2c801295d230c220aeebf87a73 to before b5c7397b7fd125203c60b59860c168ee92291272Affected
bd51834d1cf65a2c801295d230c220aeebf87a73 to before ee084fa96123ede8b0563a1b5a9b23adc43cd50dAffected
b49f085cd671addbda4802d6b9382513f7dd0f30Affected
6.1.136 to before 6.1.191Affected
6.6.89 to before 6.6.95Affected
6.12.26 to before 6.12.35Affected
6.14.5 to before 6.15Affected

LinuxLinux

6.15Affected
before 6.15Not affected
6.1.191 through 6.1.*Not affected
6.6.95 through 6.6.*Not affected
6.12.35 through 6.12.*Not affected
6.15.4 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.