CVE-2025-39754

mm/smaps: fix race between smaps_hugetlb_range and migration

State: Published
Severity: Not scored
Published: Sep 11, 2025
Updated: Oct 30, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/smaps: fix race between smaps_hugetlb_range and migration

smaps_hugetlb_range() handles the pte without holdling ptl, and may be concurrenct with migration, leaing to BUG_ON in pfn_swap_entry_to_page(). The race is as follows.

smaps_hugetlb_range migrate_pages huge_ptep_get remove_migration_ptes folio_unlock pfn_swap_entry_folio BUG_ON

To fix it, hold ptl lock in smaps_hugetlb_range().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	25ee01a2fca02dfb5a3ce316e77910c468108199 to before 37ee0d97298b0547cb26b6957ccfea2d356bd0e7Affected 25ee01a2fca02dfb5a3ce316e77910c468108199 to before f76089018b34dbe0c2e9b67c5b7d8860668748bbAffected 25ee01a2fca02dfb5a3ce316e77910c468108199 to before 2a1f3663974162b8f1e098196f557cfc1d160138Affected 25ee01a2fca02dfb5a3ce316e77910c468108199 to before 09fc018f48871123ad5dbd7b03c956580232ed76Affected 25ee01a2fca02dfb5a3ce316e77910c468108199 to before b625883ccbcc2b57808db51d1375b1d7b9bcb3e5Affected 25ee01a2fca02dfb5a3ce316e77910c468108199 to before 45d19b4b6c2d422771c29b83462d84afcbb33f01Affected
LinuxLinux	4.4Affected before 4.4Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.43 through 6.12.Not affected 6.15.11 through 6.15.Not affected 6.16.2 through 6.16.*Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

25ee01a2fca02dfb5a3ce316e77910c468108199 to before 37ee0d97298b0547cb26b6957ccfea2d356bd0e7Affected
25ee01a2fca02dfb5a3ce316e77910c468108199 to before f76089018b34dbe0c2e9b67c5b7d8860668748bbAffected
25ee01a2fca02dfb5a3ce316e77910c468108199 to before 2a1f3663974162b8f1e098196f557cfc1d160138Affected
25ee01a2fca02dfb5a3ce316e77910c468108199 to before 09fc018f48871123ad5dbd7b03c956580232ed76Affected
25ee01a2fca02dfb5a3ce316e77910c468108199 to before b625883ccbcc2b57808db51d1375b1d7b9bcb3e5Affected
25ee01a2fca02dfb5a3ce316e77910c468108199 to before 45d19b4b6c2d422771c29b83462d84afcbb33f01Affected

LinuxLinux

4.4Affected
before 4.4Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.43 through 6.12.*Not affected
6.15.11 through 6.15.*Not affected
6.16.2 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.