Riskcovery

CVE-2025-68293

mm/huge_memory: fix NULL pointer deference when splitting folio

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 11, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: fix NULL pointer deference when splitting folio

Commit c010d47f107f ("mm: thp: split huge page to any lower order pages") introduced an early check on the folio's order via mapping->flags before proceeding with the split work.

This check introduced a bug: for shmem folios in the swap cache and truncated folios, the mapping pointer can be NULL. Accessing mapping->flags in this state leads directly to a NULL pointer dereference.

This commit fixes the issue by moving the check for mapping != NULL before any attempt to access mapping->flags.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c010d47f107f609b9f4d6a103b6dfc53889049e9 to before 592db83615a9f0164472ec789c2ed34ad35f732fAffected
  • c010d47f107f609b9f4d6a103b6dfc53889049e9 to before d1b83fbacd4397a1d2f8c6b13427a8636ae2b307Affected
  • c010d47f107f609b9f4d6a103b6dfc53889049e9 to before cff47b9e39a6abf03dde5f4f156f841b0c54bba0Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.61 through 6.12.*Not affected
  • 6.17.11 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.