In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: don't unpoison huge_zero_folio
When I did memory failure tests recently, below panic occurs:
kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 PID: 137 Comm: kswapd1 Not tainted 6.9.0-rc4-00491-gd5ce28f156fe-dirty #14 RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0 Call Trace: <TASK> do_shrink_slab+0x14f/0x6a0 shrink_slab+0xca/0x8c0 shrink_node+0x2d0/0x7d0 balance_pgdat+0x33a/0x720 kswapd+0x1f3/0x410 kthread+0xd5/0x100 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: mce_inject hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:shrink_huge_zero_page_scan+0x168/0x1a0 RSP: 0018:ffff9933c6c57bd0 EFLAGS: 00000246 RAX: 000000000000003e RBX: 0000000000000000 RCX: ffff88f61fc5c9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff88f61fc5c9c0 RBP: ffffcd7c446b0000 R08: ffffffff9a9405f0 R09: 0000000000005492 R10: 00000000000030ea R11: ffffffff9a9405f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff88e703c4ac00 FS: 0000000000000000(0000) GS:ffff88f61fc40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4da6e9878 CR3: 0000000c71048000 CR4: 00000000000006f0
The root cause is that HWPoison flag will be set for huge_zero_folio without increasing the folio refcnt. But then unpoison_memory() will decrease the folio refcnt unexpectedly as it appears like a successfully hwpoisoned folio leading to VM_BUG_ON_PAGE(page_ref_count(page) == 0) when releasing huge_zero_folio.
Skip unpoisoning huge_zero_folio in unpoison_memory() to fix this issue. We're not prepared to unpoison huge_zero_folio yet.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade bpftoolUpgrade kernel-64k-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade kernel-64k-modules-core | Nov 4, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.162-107.160Upgrade python-perfUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-devel | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 6, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-amdUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-devel-azure | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-azureUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub