The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: don't unpoison huge_zero_folio
When I did memory failure tests recently, below panic occurs:
kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 PID: 137 Comm: kswapd1 Not tainted 6.9.0-rc4-00491-gd5ce28f156fe-dirty #14 RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0 Call Trace: <TASK> do_shrink_slab+0x14f/0x6a0 shrink_slab+0xca/0x8c0 shrink_node+0x2d0/0x7d0 balance_pgdat+0x33a/0x720 kswapd+0x1f3/0x410 kthread+0xd5/0x100 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: mce_inject hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0
The root cause is that HWPoison flag will be set for huge_zero_folio without increasing the folio refcnt. But then unpoison_memory() will decrease the folio refcnt unexpectedly as it appears like a successfully hwpoisoned folio leading to VM_BUG_ON_PAGE(page_ref_count(page) == 0) when releasing huge_zero_folio.
Skip unpoisoning huge_zero_folio in unpoison_memory() to fix this issue. We're not prepared to unpoison huge_zero_folio yet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-64k-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-doc | Nov 4, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.162-107.160Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perfUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-static | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 6, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-obs-qa | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-awsUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04 | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub