CVE-2025-38510

kasan: remove kasan_find_vm_area() to prevent possible deadlock

State: Published
Severity: Not scored
Published: Aug 16, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

kasan: remove kasan_find_vm_area() to prevent possible deadlock

find_vm_area() couldn't be called in atomic_context. If find_vm_area() is called to reports vm area information, kasan can trigger deadlock like:

CPU0 CPU1 vmalloc(); alloc_vmap_area(); spin_lock(&vn->busy.lock) spin_lock_bh(&some_lock); <interrupt occurs> <in softirq> spin_lock(&some_lock); <access invalid address> kasan_report(); print_report(); print_address_description(); kasan_find_vm_area(); find_vm_area(); spin_lock(&vn->busy.lock) // deadlock!

To prevent possible deadlock while kasan reports, remove kasan_find_vm_area().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c056a364e9546bd513d1f5205f0ee316d8acb910 to before 595f78d99b9051600233c0a5c4c47e1097e6ed01Affected c056a364e9546bd513d1f5205f0ee316d8acb910 to before 8377d7744bdce5c4b3f1b58924eebd3fdc078dfcAffected c056a364e9546bd513d1f5205f0ee316d8acb910 to before 2d89dab1ea6086e6cbe6fe92531b496fb6808cb9Affected c056a364e9546bd513d1f5205f0ee316d8acb910 to before 0c3566d831def922cd56322c772a7b20d8b0e0c0Affected c056a364e9546bd513d1f5205f0ee316d8acb910 to before 6ee9b3d84775944fb8c8a447961cd01274ac671cAffected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.146 through 6.1.Not affected 6.6.99 through 6.6.Not affected 6.12.39 through 6.12.Not affected 6.15.7 through 6.15.Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

c056a364e9546bd513d1f5205f0ee316d8acb910 to before 595f78d99b9051600233c0a5c4c47e1097e6ed01Affected
c056a364e9546bd513d1f5205f0ee316d8acb910 to before 8377d7744bdce5c4b3f1b58924eebd3fdc078dfcAffected
c056a364e9546bd513d1f5205f0ee316d8acb910 to before 2d89dab1ea6086e6cbe6fe92531b496fb6808cb9Affected
c056a364e9546bd513d1f5205f0ee316d8acb910 to before 0c3566d831def922cd56322c772a7b20d8b0e0c0Affected
c056a364e9546bd513d1f5205f0ee316d8acb910 to before 6ee9b3d84775944fb8c8a447961cd01274ac671cAffected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.146 through 6.1.*Not affected
6.6.99 through 6.6.*Not affected
6.12.39 through 6.12.*Not affected
6.15.7 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.