CVE-2025-68321

page_pool: always add GFP_NOWARN for ATOMIC allocations

State: Published
Severity: 7.5 High
Published: Dec 16, 2025
Updated: Oct 30, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

page_pool: always add GFP_NOWARN for ATOMIC allocations

Driver authors often forget to add GFP_NOWARN for page allocation from the datapath. This is annoying to users as OOMs are a fact of life, and we pretty much expect network Rx to hit page allocation failures during OOM. Make page pool add GFP_NOWARN for ATOMIC allocations by default.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 3c4c2c96d00d112626736cc865b3c75aa8fb6de3Affected ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 0ec2cd5c58793d0c622797cd5fbe26634b357210Affected ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 9835a0fd59a1df5ec0740fdab6d50db68e0f10deAffected ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 7613c06ffa89c1e2266fb532e23ef7dfdf269d73Affected ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 3671a0775952026228ae44e096eb144bca75f8dcAffected ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before ab48dc0e23eb714b3f233f8e8f6deed7df2051f5Affected ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before f3b52167a0cb23b27414452fbc1278da2ee884fcAffected
LinuxLinux	4.18Affected before 4.18Not affected 5.10.273 through 5.10.Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.117 through 6.6.Not affected 6.12.58 through 6.12.Not affected 6.17.8 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 3c4c2c96d00d112626736cc865b3c75aa8fb6de3Affected
ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 0ec2cd5c58793d0c622797cd5fbe26634b357210Affected
ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 9835a0fd59a1df5ec0740fdab6d50db68e0f10deAffected
ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 7613c06ffa89c1e2266fb532e23ef7dfdf269d73Affected
ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 3671a0775952026228ae44e096eb144bca75f8dcAffected
ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before ab48dc0e23eb714b3f233f8e8f6deed7df2051f5Affected
ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before f3b52167a0cb23b27414452fbc1278da2ee884fcAffected

LinuxLinux

4.18Affected
before 4.18Not affected
5.10.273 through 5.10.*Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.117 through 6.6.*Not affected
6.12.58 through 6.12.*Not affected
6.17.8 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.